Ensure that "root" can not login via "ssh"