A couple of security enhancements

Ability to restrict SSH access to an array of hosts/networks

Ability to disable root login via SSH