We want to use app.password only when *not* in production of course

I used this to create new users on demoresller.kolab.klab.cc and I don't see why not.

I guess not setting a password would be an alternative if that works... The random password is just there until somebody sets one that somebody knows.

No changes

A note on why would be good in the commit message.

dispatch the right job

Will require at least some more cleanup (remove WalletCharge job and command).

Looks like a good start to me.

Use the default flag

...

Don't include the .default suffix in the folder id

This will require something like this: