Comment by bandrami

Hm. That's more mechanism-as-policy than I like, e.g.:

Refusing all RSA keys smaller than 1024 bits

The next release of OpenSSH will remove support for running sshd(8) with privilege separation disabled

That's not really the sort of decision application programmers should be making for sysadmins.