service account

Split “tux” (interactive) from “camelot-svc” (service)

(Production pattern or when Camelot hosts multiple services)