openstack-ansible-security/doc/source/developer-notes/V-38612.rst

The tasks in sshd.yml will ensure that SSH does not allow host based authentication.