Allow API password to be specified as a flag

The password for the unit is not allowed to do a lot