i have a pix 501 that i would like to allow a couple of users to connect to the pix via ssh with read only privileges. i have tried adding command username user pass pass privilege 5 but the user still seems to have full access. what am i doing wrong? thanks