For testing it I added these four lines to my
# /etc/hosts.deny ssh-agent:ALL sshd:ALL
I waited some time and then I tried to gain ssh access to the loop-back IP address. But I still get this:
$ ssh root@localhost Password: ▊
And I can access it. I even tried it with adding entries explicitly denying access from 127.0.0.1.