what about tmsh modify sshd include command?
e.g.
// before
[root@ve11a:Active:In Sync] config grep -i pubkeyauthentication /config/ssh/sshd_config
PubkeyAuthentication yes
// configure
[root@ve11a:Active:In Sync] config tmsh
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) modify sys sshd include "PubkeyAuthentication no"
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys sshd
sys sshd {
include "PubkeyAuthentication no"
}
// after
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) q
[root@ve11a:Active:In Sync] config grep -i pubkeyauthentication /config/ssh/sshd_config
PubkeyAuthentication no
PubkeyAuthentication yes