The desired password is simply set in the following attributes:
password objects[].password
There is no automatic synchronization of passwords from the top level password attribute to the password attribute on the individual resource accounts. To pre-expire the password, set the following attributes:
sys.expirePassword objects[].sys.expirePassword