drush-ops/drush — pull request #627 by arnested (2014-05-09 09:54:36+00:00)
Title: Sanitize password to a randomly generated password

Sanitizing the password to the fixed string 'password' is an insecure
default.

Since most people probably won't be aware of the sanitizing when doing an sql-sync they could end up with publicly available sites with insecure passwords.