And by that, I mean "server_repl_password" and "server_repl_password". If you don't and someone tries to repackage the box (to save on boot time), you'll get some funky failures because vagrant isn't aware of the random passwords that were generates on the chef-run when the box was created :)