Each standard image comes with a user, e.g. `centos`, `opc`, `cloud-user`. We should delete, or at least turn off SSH access for these. This is probably best done in the `finish` script as it guarantees that the user can log in first.