Be able to interpolate the username into authorized_keys path

We don't want users to be able to add arbitrary ssh keys without oversight,
ergo we push out a set of authorized keys files to machines with puppet
in a directory the user doesn't have write access to.