disable root login via SSH

* search for any existing PermitRootLogin instances
* if found, replace with 'PermitRootLogin no', if not add
  'PermitRootLogin no' at the end of the file