Use URL encoding on passwords and escape URLs before passing to CLI command.