···3939```
40404141Next, move the `knot` binary to a location owned by `root` --
4242-`/usr/local/bin/knot` is a good choice:
4242+`/usr/local/bin/` is a good choice. Make sure the binary itself is also owned by `root`:
43434444```
4545sudo mv knot /usr/local/bin/knot
4646+sudo chown root:root /usr/local/bin/knot
4647```
47484849This is necessary because SSH `AuthorizedKeysCommand` requires [really