maintenance mode enable from grain

As agreed, this behaviour doesn't change anything, so merging this branch and we can work out how we want to handle this case later - it's not the end of the world if someone doesn't change this password as it doesn't really 'protect' anything.