The bare 'password' variable in user.yml could silently collide with any
same-named variable elsewhere in scope. Rename to user_password to
namespace it alongside username.
BREAKING CHANGE: callers passing 'password' to this role must rename it
to user_password.
patrick