I've added the kept_users and kept_groups part. The ceph user is only needed for running the component with/and ceph-deploy, not for running ceph itself, so it isn't such a big issue