Fix the order of the steps so the authorized_keys file is owned by the bundler user