Keep the password out of swap with mlock()