Use the parent app’s default ssh username.
Improve how limit is implemented.

This really doesn’t belong here at all, its a bad hack and should be done in a real catalog script instead.
Moar docs.