fabric (incorrectly) asumes User root ssh_config
our fabric code assumes we have a User root
block for all tpo hosts, which is incorrect: i actually deliberately set User anarcat
on pauli, for example, so that I don't push as root.
this should be fixed with a fabric-specific config.