don't show password on stdout