diff --git a/etc/ssh/sshd_config.d/20-disable-gssapi.conf b/etc/ssh/sshd_config.d/20-disable-gssapi.conf
new file mode 100644
index 0000000..5efdfbb
--- /dev/null
+++ b/etc/ssh/sshd_config.d/20-disable-gssapi.conf
@@ -0,0 +1 @@
+GSSAPIAuthentication no
diff --git a/etc/ssh/sshd_config.d/20-disable-passwords.conf b/etc/ssh/sshd_config.d/20-disable-passwords.conf
new file mode 100644
index 0000000..b32dc2f
--- /dev/null
+++ b/etc/ssh/sshd_config.d/20-disable-passwords.conf
@@ -0,0 +1 @@
+PasswordAuthentication no