disable root login via SSH

I think this needs to be more complex, replacing any other `PermitRootLogin` line.