add recipe to setup system users
configure sudo with sysop group and keep vagrant able to run root commands in development