# Key-only SSH for local accounts (add keys to ~/.ssh/authorized_keys). PubkeyAuthentication yes PermitRootLogin no PasswordAuthentication no PermitEmptyPasswords no KbdInteractiveAuthentication no