Repeated reconciliations because a new password is constantly generated => operator not idempotent
Reconciliations happen repeatedly because a new password is generated by default each time the reconciliation is run, which means that the operator isn't idempotent. A new password should only be generated if corresponding dbcredentials don't already exist.