sj: remove password input over env or parameter
sj: replace deprecated getpass with readpassphrase
update bxml