From openssh 7.0 release notes: * PermitRootLogin=without-password/prohibit-password now bans all interactive authentication methods, allowing only publi

From openssh 7.0 release notes: * PermitRootLogin=without-password/prohibit-password now bans all interactive authentication methods, allowing only public-key, hostbased and GSSAPI authentication (previously it permitted keyboard-interactive and password-less authentication if those were enabled). It mentions that previously without-password it would still allow keyboard-interactive logins. Should be fairly easy to fake for a botnet!