sshd:
  auth:
    password: 'no'
    pubkey: 'yes'