A user has recently suggested that TurnKey provide an easy option to disable SSH password login. I think it's a great idea and we should definately look at this for v17.0. Ideally this should be at firstboot (during interactive init), but a Confconsole plugin would probably be a good thing too?!