@propagandalf yes you are absolutely right, we want to stop the root user from being able to login. It should be:

PermitRootLogin no

This highlights the reason why I don't want to do anymore tutorials/guides on steemit, once it's posted that's it, you can't edit it in any way and if it's wrong then it's wrong which is obviously a bit naf when you're trying to teach people how to be safe.