# <str<bool>> whether to harden managed node's SSH service
harden: true