3.10.2.6

now a databox password (in abox:sbas) can be null