use the same user as for adding to SSM