[Estragon]

You could set those up with separate identities authorized with forced commands, though I'm not sure how you would secure rsync from abuse.