  - name: %%ci_login%%
    groups: [sudo]
    sudo: ["ALL=(ALL) NOPASSWD:ALL"]
    shell: %%ci_shell%%
    ssh-authorized-keys:
      - %%ci_pubkey%%
      - %%ci_pubkey2%%
    lock-passwd: False
    passwd: %%ci_user_pw_user%%
