"Updated sandbox for privilege-separated pre-authorization sshd process" is listed as a modification to the open-source project, but I suspect this is out-of-date.
It’s what Apple experimented with before they came up with the current entitlements system.