It looks like for V2.0, it checks to see if the password is None:
https://github.com/openstack/python-keystoneclient/blob/7780758f1130f3195ac4145ebc2aea792e55b7d6/keystoneclient/v2_0/shell.py#L143-L144
If is isn't it moves forward with updating. Doesn't look like it checks if it the password is an empty string. Here is the logic for the V3 client versions;
https://github.com/openstack/python-openstackclient/blob/c55fdb6f6d1fc356ee03cf21fdf3d5b99418c921/openstackclient/common/utils.py#L253
It looks like for V2.0, it checks to see if the password is None:
https:/ /github. com/openstack/ python- keystoneclient/ blob/7780758f11 30f3195ac4145eb c2aea792e55b7d6 /keystoneclient /v2_0/shell. py#L143- L144
If is isn't it moves forward with updating. Doesn't look like it checks if it the password is an empty string. Here is the logic for the V3 client versions;
https:/ /github. com/openstack/ python- openstackclient /blob/c55fdb6f6 d1fc356ee03cf21 fdf3d5b99418c92 1/openstackclie nt/common/ utils.py# L253