5.11 invalid users

This option specifies a list of Linux users that cannot be authenticated. The default is empty. You can specify invalid users = root to deny any authentication attempt against the root user.