allow oo-trap-user to run from non-public-key auth

clarified command branching and debugging