Unchecking checkbox "Allow Password Authentication" in WebUI:
--> System Settings --> Services --> SSH --> Configure
refuses SSH user logins with password authentication globally.
When user home resides on an encrypted volume and that is still locked (e.g. after reboot), SSH login via password is permitted.