Today I configured a new backup solution that required me to restrict root ssh access to a single IP for the root user.