And back to replacing the sshd_config, as it doesn't make sense to not force the config to be updated.
Disable HostbasedAuth for the root user by default.