write prompts and checksums to stderr to allow piping generated password
use symbols by default, with option to disable