set PasswordAuthentication no