A Linux administrator needs to restrict SSH logins on a public-facing server so that only the accounts 'deploy' and 'admin' can authenticate, while all other local accounts should be denied SSH access. The change must apply globally to the SSH daemon. Which configuration in /etc/ssh/sshd_config, followed by a service reload, accomplishes this?