Removed password from the console on startup

I find this a huge security risk, broadcasting the password in the console when the server starts. It's bad enough the password is in plain text in the config file... Couldn't you prompt for a password on the first run and hash it and store the hash in the config or even a different file??