It may also be worth noting <account>::..... meaning that there is no password required (empty password).
If you are creating an ssh key-onlykey-only user you could use <account>::0:0:99999:7::: to require that the user set their password (i.e. that they use for sudo) on their first login.
Note: key-only authentication means that a password is NOT an authentication factor.