- drop hardcoded values, use instance parameters
- propagate parameters to sub instances
- plus: fix password reinstall