add `ssh_pwauth: false` if you can edit the cloud-init configuration - that's what I'm doing