You'll be able to deny SSH login for the accounts with administrator privileges. In cases like this, if you should carry out any privileged steps with your SSH session, you'll have to use runas. In addition, it gives an added layer of security by making use of shorter-lived SSH keys https://rylanoimps.canariblogs.com/everything-about-servicessh-45190486