hetzner.nix: initialRootPassword setting should be easily overrideable