The Managedmac::Sshd implementation is incomplete. It does not account for an administrator's ability to activate access for "All users" via the GUI. See issues #43 and #44 for background info.