Change permit_root_login from yes to no.