Override the apply() method of password so we can keep null/empty
passwords from being set.  Still don't know how this is happening but
I've seen it 3-4 times now.  It's a problem.