Add masking as an option, default to hidden password typing

I personally prefer hidden passwords in the CLI - this gives the option. It may be your preference that masking is the default