Accept password via environment

You don't need to force data through a pipe. BASH allows per-invocation
variable assignments.