'AllowGroups ssh-users' locks out anyone not in the group ssh-users (notably, including any test accounts you may have misconfigured). You'll have to do somethi

'AllowGroups ssh-users' locks out anyone not in the group ssh-users (notably, including any test accounts you may have misconfigured). You'll have to do something with the account anyway, so... There are various ways of central access control (modern SSH has certificates; Kerberos works too), which may also help here. But that's probably overkill for your issue.