Disable BLANK_PASSWORDS and USER_AS_PASS

They're as obnoxious as DB_ALL_* when enabled by default.
Land #3137, un-default USER_AS_PASS and...

...BLANK_PASSWORDS. This is likely to affect nobody's normal work flow,
since best practice is to be explicit about your options in your RC
files.