Expect we'll need something similar for other entities (e.g. `CouchDBNodeSshDriver`?) that run as other users.
But let's go with this for M1, and see if there's something more general to extract subsequently.