Comment 3 for bug 2037703

> looks like there's no db_input/db_go call in the openssh-server.config file. Is that by intention?

You're right. Sorry, I knew this but had forgotten it.

So openssh-server itself does not ever prompt for either of these settings in mantic, which means there's no risk of dpkg-reconfigure causing confusing behavior vs an sshd_config.d setting. (The debconf settings are still used for special config file merge handling on upgrades.)

In trusty-focal, we call db_input for openssh-server/permit-root-login but not for the password auth setting that you're changing; so again there's no confusing behavior.

Sorry for the distraction.