A simple tool to limit access to git repositories for SSH git clients, intended to be run from authorized_keys. Supports read/write mode control, glob patterns, and path canonicalization.