expand special shell wildcards in output file paths

Implements CLT-466
improve user:password:change helper text
minor refactoring of the exceptions throwing code