nixconfig: Allow to override default password