Root SSH password emailed in plain text on provision

My initial root credentials arrived by plain email. For a box that catches domains worth money please force key-based auth or at least a forced reset on first login.