I just don't understand why you can't change the password (or even better, choose a certificate) before you open the ports to the world.