Do not fail to validate if password is empty

This is nice in theory, but it breaks when upgrading because people have
no easy way to set the password that is missing in the proposal.

Instead, we create a password in apply_role_pre_chef_call and re-use it
every time.