docs: explain why we auto-generate random update passwords