time passes
more modernization
- conditionalize copying old ssh keys
- packages: enable tmux, disable httpd
- no groups, UID for PA/marin