.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: sshd_config.5,v 1.293 2019/11/25 00:52:46 djm Exp $
-.Dd $Mdocdate: November 25 2019 $
+.\" $OpenBSD: sshd_config.5,v 1.294 2019/11/26 22:42:26 jmc Exp $
+.Dd $Mdocdate: November 26 2019 $
.Dt SSHD_CONFIG 5
.Os
.Sh NAME
.It Cm PubkeyAuthOptions
Sets one or more public key authentication options.
Two option keywords are currently supported:
-.Cm none (the default; indicating no additional options are enabled)
+.Cm none
+(the default; indicating no additional options are enabled)
and
.Cm touch-required .
.Pp
The
.Cm touch-required
option causes public key authentication using a security key algorithm
-(i.e.
+(i.e.\&
.Cm ecdsa-sk
or
.Cm ed25519-sk )
The
.Cm touch-required
flag disables this override.
-This option has no effect for other, non-security key public key types.
+This option has no effect for other, non-security key, public key types.
.It Cm PubkeyAuthentication
Specifies whether public key authentication is allowed.
The default is