Use oneshot to add default user to ssu group