Understood; it's just in the wrong place.  The getpass should be where you parse the args, rather than the client library.  You should be using getpass so that people's credit-card-linked password doesn't show up in their command line history.  Will resubmit with this change and you can see what you think.