Some services (like Parse and Push.io) are not even allowing a passphrase. Not sure I get that

Perhaps making it optional, would help here - I still believe it is a good thing to have a passphrase for the .p12 file