The daemon ignored an empty OptionalPreSharedKey, so a UI/CLI request to clear the pre-shared key was silently dropped. Pass the pointer through unconditionally — profilemanager already handles the empty-string case.