UsePAM yes ChallengeResponseAuthentication no PasswordAuthentication no