PermitEmptyPasswords no
# Comment to enable s/key passwords or PAM interactive authentication
-# NB. Neither of these are compiled in by default.
+# NB. Neither of these are compiled in by default. Please read the
+# notes in the sshd(8) manpage before enabling this on a PAM system.
ChallengeResponseAuthentication no
# To change Kerberos options