--- ssh_baseline_password_authentication: "no" ssh_baseline_permit_root_login: "no" ssh_baseline_pubkey_authentication: "yes"