v1.1.0-beta8 Replace last approach with simply disabling the user password in /etc/shadow
Pre-release
Pre-release
Using a star * instead of a bang !, keeps the user account unlocked, but still disables login by password by keeping the password invalid.
Effectively this leaves only the option of public key ssh login.