Unable to SSH to Linux server using SSH Relay with SSH Private Key credential

Unable to SSH to Linux server using SSH Relay with SSH Private Key credential
SSH Relay connection prompts for either "Password:" or "Enter passphrase for private key:"
Private Key has no passphrase (unencrypted / passwordless)
SSH Private Key credential was initially configured with a blank or empty passphrase
Modifying the credential to an encrypted SSH Private Key (with passphrase) still fails

At the time of writing this document, a publicly available fix has not yet been made available. Please see the below workaround that addresses this issue.

Workaround:

1. Verify the Private Key is encrypted with a passphrase. This is required for security purposes in PAM.
   
2. Delete the problem credential from the SSH Account Domain in Enterprise Credential Vault.
3. Create a new credential with SSH Private Key, with a proper passphrase configured.
   
4. Assign this new credential in the SSH Account Domain.
5. The ssh-relay connection should work properly with no additional passphrase/password prompt.
   

The problem occurs in the Enterprise Credential Vault with an SSH Account Domain when a credential is initially created with a blank or empty passphrase only. When trying to modify this credential later to configure to the correct passphrase, the change is not persisted, as an ssh-relay session still prompts for a password/passphrase. However, the same problem does not occur if some invalid passphrase is configured initially and only occurs if the initial passphrase was configured to be blank or empty.

Duplication Steps:

1. (conditional) Create an SSH key pair to use in this test:
   https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/b1l9jm16.html#brxbky9
   Note: Verify the public key has been copied to the authorized_keys file on the target run host. Be sure to create a private key with some passphrase to demo this entire problem scenario properly.
   
   
2. Create a new credential in Enterprise Credential Vault for this SSH Account Domain. Be sure to leave Passphrase blank for now and click Add Credential.
   
   
3. Attempt an ssh-relay session to the server with the run user / run host configured here.
   Note: Notice the prompt for "Password:" which would be the password of the private key.
   
   
4. Modify the credential for this SSH Account Domain from the Enterprise Credential Vault, re-enter the private key and this time enter the proper passphrase for this credential.
   Note: It is now expected that the session will connect with no "Password:" prompt.
   
   
5. Attempt an ssh-relay session once again. Notice the same password prompt, which is actually a private key passphrase prompt. It appears the credential is not modified with the new / updated passphrase that is entered into the UI when the initial passphrase was blank or empty.