[Security] Remove unwanted sshd service account privileges

[manojampalam]

SSHD only needs "Replace a process level token" privilege to spawn session processes on client behalf.
Revise and refactor code to remove other unwanted privileges