if it fails, then delUserData should remove the autosign, just as we do in the ssh_provision orchestration.