Rootless JupyterHub 2.3 without users
- JupyterHub 2.3 as system service in a rootless container
 - minimal container: no extra users, filesystem mounts or Slurm runtimes needed
 - custom 
VSCSlurmSpawnerthat generates user's environment without any local users - JupyterHub non-root user connects with SSH to remote login node and submits user's notebook job to Slurm (via sudo)
 - JupyterHub user's environment is passed to notebook job through SSH and sudo with strictly controlled list of variables
 
JupyterHub components:
- Oauthenticator: authentication with Oauth delegation from VSC account page
 - batchspawner: notebooks launched in Slurm cluster
 - jupyterhub-moss: resource selection interface in JupyterHub