Instead of writing out "no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty" in the authorized_keys file; you can use the "restrict" keyword to enable all current and future restrictions.