When saving settings, empty sensitive fields (pagespeedApiKey,
globalpingApiKey, systemEmailPassword) were sent as "" to the server,
which treated them as $unset operations — deleting the stored keys.
Now the form omits these fields from the payload when they're already
set and haven't been explicitly reset by the user.