These accounts should:

• have an user account
• belong to wheel group
• have some sudo capabilities to restart services like nginx (we'll take care of that later)

We'll populate them with kalix and dereckson for the first iteration.

That will in the future allow to disable login to root per SSH to increase security.