Ensure input prompt goes to stderr.
Pad out the secret so it can be used with ykpersonalize without modification.