OpenSSH root from localhost

restrict root to only be able to use ssh from localhost
Try out following entry:
AllowUsers root@localhost
If the pattern takes the form USER@HOST then USER and HOST are separately checked, restricting logins to particular users from particular hosts.