update SSHD configuration - KbdInteractiveAuthentication

[konstruktoid]

Replace the deprecated ChallengeResponseAuthentication with KbdInteractiveAuthentication

https://www.openssh.com/txt/release-8.7 (2021-08-20):

 * ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
   in favour of KbdInteractiveAuthentication. The former is what was in
   SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
   treated as somewhat but not entirely equivalent. We retain the old
   name as a deprecated alias so configuration files continue to work
   as well as a reference in the man page for people looking for it.
   bz#3303

[hashicorp-cla]

All committers have signed the CLA.