My solution to this has always been to auto-generate a password and dump it in a by file. If it's a test instance then this is a nice obvious place to go get i

My solution to this has always been to auto-generate a password and dump it in a by file. If it's a test instance then this is a nice obvious place to go get it from. If it's not then the service isn't open by default, and in both cases we're not asking people to enable remote access themselves by some scheme which may allow them to do it without setting a password. Same thing with TLS IMO: let certs be specified, or default to generating some - any option is better then default no encryption.