@domcleal, I first tried to delete :root_pass from the hash, but I run into validation errors.  I will re-look at it since it's cleaner to do it this way.