t442: ensure we sync user's home as the user
t467: simple state and config for fail2ban service