centralize username config
use wheel group and make sure someone's in it