add dduvall to group 'statistics-users'

and also bastion access to get to stat1003

stat1003 has public IP but is firewalled,
so still needs bastion per ottomata

Change-Id: Ia6a943b03c10469da2b652b708f3a111b1541594
RT: 8394
Merge "add dduvall to group 'statistics-users'" into production