When password authentication is allowed, it specifies whether the server allows login to accounts with empty password strings. The default is ``yes''.