Agree, but this was moved from elsewhere in the doc.  We should probably have an initial user config ansible run to set up local users and perform subsequent config with those identities.