Comment # 6 on bug 1194503 from Neil Rickert

Currently, I am using:

01-auth.conf
  ---- contents
PermitRootLogin prohibit-password
PasswordAuthentication  no
ChallengeResponseAuthentication no
UsePAM  no
  ---- end contents

And this is doing what I want.

I hope that is a sufficient hint for you.