Referring to http://tools.ietf.org/html/rfc5849#section-3.4.2

    2.  An "&" character (ASCII code 38), which MUST be included
        even when either secret is empty.