Set PermitRootLogin to prohibit-password instead of yes. Change-Id: Ifde08c43c29a6c437d622399ea48be96c0ac3432