ssh: permit only public key authentication