PermitRootLogin prohibit-password AuthorizedKeysFile .ssh/authorized_keys KbdInteractiveAuthentication no PasswordAuthentication yes UsePAM yes UseDNS no Subsystem sftp /usr/local/libexec/sftp-server