Fix PASSWD to allow changing to an empty passphrase for PKI files.