disable password login
ensure key size is 2048
disable root login by default