Also, generate password randomly if not provided instead of using an
hardcoded value.
Publish them as they can be generated internally.