Comment 2 for bug 1598890

The reason why we opted for a default in the template is that by making the client update the passwords file on update can cause more damages unless it is run from the same directory where the passwords file was generated initially... if it's not, it will re-create (and change) all passwords.