- Enable UsePAM by default (needed to prevent killing all SSH connections on service restart mga#5137) - Fix systemd units to ensure sshd-keygen is run. - Remove options from default sysconfig file that are not used.