introduce new user: chef_server

other erchef ports will need this, too