Have the installer ask the user for a osae password when creating the DB.

[Automate1]

Having a known, fixed password is a security hole. I realize there are other security concerns with OSA such as the REST service not requiring a password but you have to start somewhere.