allow null PG_PASSWORD