Path of least resistance seems to be to use openssh-sftp-server (a module in openssl). This is used by billy.

For a ftp only user with ssh, use rssh (from apt), uncommment allowsftp. Also used by billy.