An XCCDF Rule
/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf
PermitRootLogin prohibit-password