Generate with:
python3 -c "import crypt; print(crypt.crypt('pass', crypt.mksalt(crypt.METHOD_SHA512)))"
Direct root SSH will be disabled regardless of this setting (CIS 5.2.10).
No admin users configured. Add at least one user with sudo access if root is locked.