sshd: actually disable challenge response auth