use compgen for executables, empty string for mask password, fix bash set builtin