user { 'root': ensure => present, password => pw_hash($root_pw, $root_salt), }