broke ensure user out into docommon defined type so can revert to using user{} once Ubuntu bug fixed