type: txt
help: Configure sshd_config access control for disallowed groups.
comp_help: The SSH user and group access control directives (allow/deny) are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups. Multiple groups can be specified as a comma-separated list.

create: sudo sed -i -e '$ a \
DenyGroups $VAR(@)' /etc/ssh/sshd_config

delete: sudo sed -i -e '/^DenyGroups $VAR(@)$/d' /etc/ssh/sshd_config

update: sudo sed -i -e '/^DenyGroups.*$/c \
DenyGroups $VAR(@)' /etc/ssh/sshd_config