If I understand correctly, it's quantum-metadata that connects to nova-metadata using this password. As there might be other things connecting to nova-metadata, I guess the password should be created in nova. But that introduces a circular dependency... Hrm. Maybe setting it in quantum is good enough for now, indeed.