Ability to bind SSH to specific interface

Is there a way to have SSH bind to specific interface via core configuration? For instance, if we have devices that are connected over a VPN, I’d like to enable SSH but only have it bind to the VPN network interface.

Right now, I don’t think there is, but you could probably make something like that work using system-files for /etc/ssh/sshd_config, but that would be a privileged interface