Whoooops, fix setting of passwords to actually work; add deploy user to sudoers.