Actually, in order to regain ssh access, the entire “service ssh” section hsa to be deleted then re added.