prefixing the variable with sshd_ is smart, since some names are used in both ssh_config and sshd_config and you might want different values. Don't think we need sshd_config_ though.

the variable itself should match what is used in the configs. ie permit_root_login matches PermitRootLogin, but adjusted to not use CamelCase.

so PasswordAuthentication should be sshd_password_authentication