Wow, I still think they have one of the best control panels around.. Yep, dont use the password route..go with "push" to an external party..just as fast and no password needed.
I always put the domain into its own account, then just hand over the account to whoever buys the domain. Then, they can either use that account, or push the domain into their existing account.