Currently it is possible to create encrypted backups with an empty password. This gives an error that the backup failed but still creates a 0B backup file. We should probably require a password of a min. length (same as for authentication) for the backups.