Add a torrancew/account to manage users.
install users on all nodes.
Add an account for bob.
Use saz/sudo
make nodes create sudo::conf resources
Use the sudo module and allow the sudo group to do everything with no password.