Msec allow_root_login tries to _replace_ PermitRootLogin line in sshd_config. Unfortunately after new installation this line is commented out and msec does _not_ insert new line. It means it does not change defaults whatever you specify in msec configuration.
Possibly applies to any other configuration file as well. -andrej
