Add masking as an option, default to hidden password typing

I personally prefer hidden passwords in the CLI - this gives the option.