I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user.
I was thinking of doing a
notify to an
Exec resource that sets the password but this is triggered when any property that Puppet manages is modified (e.g., group membership, home directory, etc.). I do not want that.