Use an initial user to login (e.g. root) and create a new user which is used afterward
Install the ruby version correctly.
Disable root login and SSH password login.
Still allow root login with public key auth (otherwise the first half of the provisioning script can never execute again)

There's probably a better way to do this but for the moment let's just disable root password login
Initial cut of the instructions, including bootstrapping