bugfixes:
  - user: do not pass ssh_key_passphrase on cmdline (CVE-2018-16837)

bugfixes:
  - user module - do not pass ssh_key_passphrase on cmdline (CVE-2018-16837)

Fix changelog entry for user module CVE fix
Fix changelog entry for user module CVE fix
