Password Gets Erased . . .

When editing a user the password always gets saved, even if the password is blank. If I edit a user and only make a minor change (like enabling the personal contact form), the empty password gets saved as well, and shouldn't.

The user module does not update the password, and I believe it is because of this code starting at line 112 in the user_save function:

      if ($key == 'pass' && !empty($value)) {
        $query .= "$key = '%s', ";
        $v[] = md5($value);
      }