disable PermitRootLogin

use INITIAL_USER instead