common: disable SSH password login and set timezone
rails-production: add missing sudo flag