base-files: improve default root-passwd script