Currently create-dbusers bails out if the user exists in the DB (and since these passwords are ephemeral from creation it leaves a lot of orphaned users where a process failure par way through etc). I would like to be able to update passwords as needed in the DB and drop users as appropriate.

These grants are currently defined on labsdb1001 and labsdb1003