I develop on Glassfish with a blank admin password.
Oh yes, when system property with password is set, then it's validated (ekhm...) against length. When properties come from /tmp/cargo/conf/password.properties - not. This weird validation should be removed.
A workaround for now is to keep the blank password in /tmp/cargo/conf/password.properties...