Actually this is not required to provide this password. In pg_hba.conf file by default we trust connections via socket, thus user in any time can login and ALTER ROLE postgres. So this is secure and less error prone solution.