Create a super user instead of using root.
Set the debian-sys-maint password on startup, since it is randomly generated.