First boot creates an administrator from ARROW_ADMIN_EMAIL / ARROW_ADMIN_PASSWORD (defaults [email protected] / arrow-admin), flagged for a password change on first sign-in.