Initial provisioning/user setup via root remote_user, continued CM via other remote_user?

You can run a ping task with ignore errors and register result, then conditionally create the user with diff remote user based on that.

Brian Coca