Is username/pw on the list to be managed? this is my first go around with capsman which is nice, but with devices that auto boot into caps mean you don't even need to login into the AP ahead of time for config.

the issue though is you will need to login even after the provision to change the default blank pw, this seems backwards, since capsman can do the code upgrades etc, why not allow it to pull the user/db or even better the radius server info so that the default login doesn't have to be messed with?