> Another idea is to change pg_hba.conf to not default to 'trust' but then
> the installing user is going to have to choose a password.
I like this approach. Set it to password (or md5) on local, and force
the request of a password during initdb.
If for some reason they forget their password, they simply bump it to
trust on local for the 1 minute it takes to change it back.