debugging outputs the password, so the manpage should mention that