* introduce many variable with sensible defaults * generate an admin password if none is provided (default) * execute occ commands as unprivileged user