Puppet module. Manage local users, setting an initial password but letting the user change it as needed afterward.