Restrict ssh to only authgroup & root via key

infra meeting is now completly implemented toward acceses
/cc @regilero @jpcw @guidtz