Treat empty passwords the same as ****