test AuthenticationMethods inside a Match block as well as in
the main config section

it's no longer possible to disable privilege separation in sshd, so
don't double the tests' work by trying both off/on

UsePrivilegeSeparation no is deprecated, test "yes" and "sandbox".
rCVS: ----------------------------------------------------------------------

regression test for multiple required pubkey authentication;
ok markus@