update password selection advice
closes: #1064617, #998408, #868869, #656509
This gets rid of the outdated advice about password selection and renewals, and ensures that people know what to expect if they leave the root password blank.
Having tried various wordings in #1064617 we seem to have arrived at something that's generally acceptable.
Edited by Philip Hands