Obscure port; Deny root; Enable pubkey