It’s not possible to set a conduit to disable password auth in sshd config. Typically, I’d disable this, PAM, and challenge response, and just leave public key. I can enable public key auth, but disabling password auth completely shuts down ssh access, and I have to access through the debug port, then revert changes in /etc/ssh/sshd_config to get it back. I see this as a major security concern that needs to be addressed. Or maybe there’s an undocumented process for accomplishing this.