diff --git a/sshd_config b/sshd_config
index 93932f8..4a1032c 100644
--- a/sshd_config
+++ b/sshd_config
@@ -1,2 +1,4 @@
 # Allow remote access to -R remote port forwards
-GatewayPorts yes
\ No newline at end of file
+GatewayPorts yes
+# Optionally add it under "Match User <user>" to restrict who can do this.
+# Another option is "GatewayPorts clientspecified", but I haven't persionally tested that.
\ No newline at end of file