Locking down root privileges on a cloud instance

When I was writing my last blog post, I ended up having to enable root access to my Vultr instance so that I could reset my SSH configuration and document it properly for the blog post. But now I'm done with that blog post, and root is still availabl...