It's more idomatic to do this:

```go
foo := os.Getenv(...)
if foo == "" {
  foo = DEFAULT
}
hash, err := hashPassword(foo)
```

Also, I don't think what you're doing is right, initRootPassword is outside scope when you call hashPassword() down at line 220.