switch to using dh-sysusr to manage users

This should take care of the error on upgrades, and generally is better than implementing things ourselves. Improvements to the user management can then be submitted upstream.

Untested.

Closes: #44