Prevent password sniffing through /proc

Basically a user could see the arguments passed to OpenSSL by examining
PIDs with `ps` or poking around /proc. This change assigns the password
to an environment variable (which is readable only by root), and then
uses OpenSSL's ability to read the password from the environment.