fix(sync): null-safe mobile compare, mask password in conflicts, label restricted attribute