@@ -0,0 +1,4 @@
# /etc/ssh/sshd_config.d/my.conf
PermitRootLogin prohibit-password
AllowGroups sudo root
PasswordAuthentication no
The note is not visible to the blocked user.