Custom passwordProvider that returns empty string should throw an exception

[richturner]

I don't think it is desirable under any circumstances to encrypt with an empty string and instead this should throw an exception but that's just my opinion ;-)