use more flexible dicts in users/ssh states