For SSH access only, do I leave `#PubkeyAuthentication yes` commented out in sshd_config, or uncomment it?

Solution 1:

man sshd_config will show you that yes is the default value for PubkeyAuthentication. So you can leave it commented out; it's the same as yes.

The stock sshd_config file also includes a comment at the top, saying that it comes with the default values present but commented out.