Don't force default password in the role.  This will be done in an application cookbook or environment if needed.