Thom Carlin of Red Hat report: The file /etc/qci/answers is created world readable and contains the root password for the deployed system.
Acknowledgments: Name: Thom Carlin (Red Hat)
This was fixed in QCI 1.0 GA.