With the Blesta module, it is possible to not specify a root password during service setup. This causes the service to get stuck with a pending status until an admin manually sets a root password and tells the client what it is.
The root password field should either randomly generate a password for the client, or the field should be required.