ansible-role-borg/templates/authorized_keys

{% for client in borg.server.clients %}
command="borg serve --restrict-to-path /srv/borg/repos/{{ client.hostname }}",restrict {{ client.pubkey }}
{% endfor %}