Split up some post-debootstrap config tasks, set root password, allow plaintext passwords for SSH login