permitopen after no-port-forwarding should allow local port forwarding while disabling all other forms of port forwarding

[mitar]

Currently it seems it is not possible to disable all other forms of port forwarding except TCP local port forwarding to a particular host and port. Listing permitopen after no-port-forwarding in authorized keys file seems to have no effect and port forwarding is still disabled.