remove non-admin users from the ssh group

This change makes it easy to revise the sshUsers variable in the main
conf file, and then re-provision the system to disable access for users
who were admin users but are no longer.