move user_packages to attributes so we can override in roles