remove shellinabox and gotty
disable password and challenge-response authentication for ssh
adapt deprecated nixos options