GSSAuth in for SSH set to yes by default

Problem:
All new builds have GSSAuthentication set to yes by default
Expected outcome:
Set to no
Foreman and Proxy versions:
v3.10

Apologies if I am wrong here but I was under the impression that OEL8 would have GSSAuthentication set to no, but all our new build have it set to yes

Is this a Foreman code thing enabling it, or is it set to yes by default. Online articles suggest it should be no unless you are set it up. We don’t this kerberos feature at all

GSSAPI options

GSSAPIAuthentication yes
GSSAPICleanupCredentials no
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no
#GSSAPIEnablek5users no

I don’t think foreman modifies ssh config at all.

Suspected this and confirmed when I created a fresh install without Foreman using an OEL8.8 ISO
Will look into adding a snippet or parameter to disable it