PEM heredoc and force user to set random password