add a dedicated 'app' user for deployment to production (we don't know what the real app name is going to be yet so stay generic)