Perhaps this is outside of the scope of this pull request, but the check for the 'ubuntu' user seems a bit hacky, especially considering the fact that rubber now supports more cloud providers than before.  Would it make sense to instead create a method on the cloud provider to indicate whether the password should be nil, similar to what you did with should_disable_password_based_ssh_login?