tidy up users
ssh authorized keys, using hiera