Instead of overwriting /etc/ssh/sshd_config, just change the PermitRootLogin parameter as that's the only thing that seems to get updated by that new file anyway.  This allows Duo to be interactively installed.