fix(toolbox): remove password for ALL users in xen-create

Before, only "valid" password were removed (the ones which indicate a
hash), but now, remove all passwords, even special "!" or "*"
passwords.