sshd - change port and only allow key based authentication