add epel, have ssh keys depend on user existence, php packages on web nodes