prompt for password on stderr and read from console or stdin