Allow (enforce?) changing ssh user password from defaults

[ES-Alexander]

Split out from #3481.

In a similar vein to #1822, the current approach is needlessly poor security practice, even if it's not important for most users right now.