Perhaps we should use `getpas.getpass()` here to avoid leaving open passwords in the settings file.
Since this script will be run manually, I see no inconvenience in doing it in this way.