  - name: %%ci_login%%
    groups: sudo
    sudo: "ALL=(ALL) NOPASSWD:ALL"
    shell: %%ci_shell%%
    ssh_authorized_keys:
      - %%ci_pubkey%%
      - %%ci_pubkey2%%
    lock_passwd: True
