Allow su_user to be templated, same as sudo_user.

This is a fix for issue 5752.