Explicitly set PermitRootLogin no in the ssh configuration for convert to server. I'm pretty sure this is the default behavior in Arch, but for something this important it's better to sepcify.

.includes/convert-to-server.sh

@@ -37,6 +37,7 @@ fi
 sudo mkdir -p /etc/ssh/sshd_config.d
 sudo tee /etc/ssh/sshd_config.d/99-stormux-server.conf > /dev/null << EOF
 Port ${sshPort}
+PermitRootLogin no
 PasswordAuthentication no
 KbdInteractiveAuthentication no
 EOF