user `sanoid` on computes is managed by chef, using the role `onecom-sanoid`.
backup nodes use `syncoid` to **pull** replicate.