[PATCH] mark OpenSSH password authentication as insecure