#sshd-config-permitrootlogin:
#  file.replace:
#    - name: /etc/ssh/sshd_config
#    - pattern: "^PermitRootLogin.*$"
#    - repl: "PermitRootLogin no"
#    - watch_in:
#      - service-sshd
#
#sshd-config-passwordauthentifcation:
#  file.replace:
#    - name: /etc/ssh/sshd_config
#    - pattern: "^PasswordAuthentication.*$"
#    - repl: "PasswordAuthentication yes"
#    - watch_in:
#      - service-sshd