ssh-hardening

SSH daemon hardening fragments — sshd_config directives, key-only auth, port and user restrictions, agent forwarding policy, and authorized_keys access control patterns