Limiting command access to an SSH user account

What’s the best strategy of limiting user to a certain set of commands when logged into a SSH session. Thinking of commands like rsync and borgbackup etc. Already looked at rssh, but would like to hear other recommendations.