The default bluetooth pin is 'BlueZ,' which is impossible to type on most phones. PIN = Personal Identification *Number* ;)
What better way to force people to _change_ the PIN? :)
In 2.15-1 we use dbus and force people to enter a pin each time.