Also, add `ceph` to the `/software/components/accounts/kept_users` and `.../kept_groups` dictionaries. For extra safety.

Even better, do it in the pan files of the accounts component, so that the user survives even if this template is removed by mistake.