Meh, just prompt them to set/change it the first time they boot, and after that, it's their fault :)