SSH key limited ONLY to port forwarding? Possible?

I would like to authorize login of a certain SSH key to one purpose
only: to port forwarding. I do not want this key to execute any
command, except maybe /bin/true or something. I think that I can
specify something in authorized_hosts to that effect, any idea what?

Due to extreme spam originating from Google Groups, and their inattention
to spammers, I and many others block all articles originating
from Google Groups. If you want your postings to be seen by
more readers you will need to find a different means of
posting on Usenet.