Rearrange everything/group.yml a bit, add test for user
Support working_dir and tty
Punt on 'net' for now
Support 'privileged'