Mention chpasswd -e in defaultpasswords hook