I've cleaned it up to follow your suggestion, including re-enabling the cracklib cleanup in febootstrap-minimize