relays are not hosting identities
indeed currently assumes it controls the whole machine/vm
Locally there is no root-needed to run "cmdeploy run"
Using existing ones is no sin