t456: completely rework state to define user/group/pubkey from users pillar
t455: add basic ssh state and template to manage sshd_config