opworks ubuntu 12 amis run recipes as user 'ubuntu' who has sudo access but doesn't know what 'apt-get' is without sudo