don't use crontab hack; change cloud-init lock_passwd setting instead