how does one restrict logging into the TTY consoles as 'root' in Debian 11 (bullseye)? In past versions I would empty the contents of /etc/securetty and that would prevent a direct login as 'root' from a TTY. It seems that bullseye doesn't have securetty any more, and creating the same empty file has no effect. the Securing Debian Manual has not yet been updated, and I can't find any alternative methods. Thanks!
EDIT: hoping to find an alternative to access.conf that doesn't expose the success or failure of the root credentials, even if it doesn't grant access to the shell.