Allow authorized_keys to be overridden at VM checkout time

Yeah, that was the idea.  There were security concerns expressed for using the same keys everywhere.

That said, I need to fix-up this PR (currently it breaks some API functionality) before it should be merged.