security: Lock down sshd

This locks down sshd and makes it compliant with the scap-security-guide rules.