only allow root ssh access via ssh key