allow reading encryption password from getpass(3) and stdin