Like Dreamer explained, you don’t touch the sshd settings.
You just set up a root password that can be used locally in your VPS by your scripts, in this case, ImmunifyAV.
Regarding security, yes, to log in to your VPS you should ONLY use an ssh-key with a strong passphrase.