..because it tries to supply an initial password where it should not - on self enrollment, the user already picked one.