Well, requirement is ( If I get it correctly ) to force minimal system setup including root pwd. It can be explicit or implicit ( ask for pwd if we are sure that it is not set or profile create told it or if we are unsure that it is set ). This version is explicit. That is reason why I ask @jsrain to verify that it is what he want. Of course I can create new list element that specify manual steps, so semi-automatic will be on demand and not on our guess.