I don't understand this change. This is intended to be used as a library, which means the actual caller should be determining how best to get the password, and pass it in, as it was doing previously.