implement `password` subcommand