With XP image started to fail test where ADMIN_PASSWORD env var is empty. Because test is expecting management interface to be unsecured in that case. But this does not happen and management interface is secured with SASL authentication factory. Test is using CLI so it is SASL which is used for accessing management interface.
Seems in other images CD, 7.3.0.GA (with legacy security in place) when ADMIN_PASSWORD was empty management interface was left unsecured.
Seems to me we should be consistent between legacy security and Elytron approach of securing OpenShift images.