Read password rather than accept it as arg