finish the TLS implementation
add -PP option for command-line password prompt (in conjunction with -tls)
uodate README to mention TLS support