fix and finally ran

image/overlay/daemon/update-keys.sh

@@ -4,14 +4,12 @@
 set -euo pipefail
 mkdir -p /users && chown keeper /users && chmod 644 /users
 
-su keeper
-
 init_repo(){ 
-    git clone -b _REVISION_ _REPO_ /users
+    su - keeper 'git clone -b _REVISION_ _REPO_ /users'
 }
 
 if [[ ! -d /users/.git ]]; then
     init_repo
-elif [[ -d /users && cd /users && ! git pull origin _REVISION_ ]]; then
+elif [[ -d /users && cd /users && ! su - keeper 'git pull origin _REVISION_' ]]; then
     init_repo
 fi