Right now we require users to set PermitRootLogin manually on all nodes. We should just automate this for the upgrade especially if we end up using default of RHEL8.
*** This bug has been marked as a duplicate of bug 1855751 ***