failure with oneadmin excluded by ssh allowusers/allowgroups

[loveshack]

Setup fails if the ssh config has allowusers/allowgroups which doesn't include oneadmin.
I don't know if there's a good way to test the possibilities initially, but it's not obvious what's happening when you get prompted for oneadmin's password. Perhaps it could enforce passwordless connexion and print something helpful if that fails.