I just learned about the script: /usr/bin/mysql_secure_installation. Very cool. Here are the commands that the script actually runs.
I am going to add these to my provisioning script (I already take care of the root password piece):
mysql -e “DROP DATABASE test;”
mysql -e “DELETE FROM mysql.user WHERE User=’root’ AND Host!=’localhost’;”
mysql -e “DELETE FROM mysql.user WHERE User=”;”
mysql -e “FLUSH PRIVILEGES;”