···39```
4041Next, move the `knot` binary to a location owned by `root` --
42-`/usr/local/bin/knot` is a good choice:
4344```
45sudo mv knot /usr/local/bin/knot
046```
4748This is necessary because SSH `AuthorizedKeysCommand` requires [really
···39```
4041Next, move the `knot` binary to a location owned by `root` --
42+`/usr/local/bin/` is a good choice. Make sure the binary itself is also owned by `root`:
4344```
45sudo mv knot /usr/local/bin/knot
46+sudo chown root:root /usr/local/bin/knot
47```
4849This is necessary because SSH `AuthorizedKeysCommand` requires [really