don't get password from cli argument (ends up in shell history...)
configurable filename (-f flag)