fixes #3725 - make default root password explicit