Superuser unable to manage xpack security

It doesn't look like the Elastic user has a password yet.
Have you tried running setup-passwords?