sudo refactoring
"managed"-role for initial configuration of host

"managed" creates the deployment account, copies in a ssh key for it and
enables passwordless sudo account for it