Restrict sudo access to strongbox user

Re-split package and user layers