use alberti alias, which logs in as a regular user in my conf

howto/retire-a-user.md

@@ -10,7 +10,7 @@
 This is done by "locking" the account in [howto/ldap](howto/ldap), so it should simply
 be:
 
-    ssh alberti.torproject.org ud-lock account
+    ssh db.torproject.org ud-lock account
 
 Note that it's unclear if we should add an email alias in the
 `virtual` file when the account expires, see [ticket #32558](https://bugs.torproject.org/32558) for