specified in the $ec2_fetchkey_user variable, so that it can be (usefully) specified via user-data at EC2 instance launch time.