Only emit password to standard error, not to the log (wincent.dev, c4b9b7e)

As mentioned in 75355bc, we can avoid emitting to the log and thus improve security a little bit.

Signed-off-by: Greg Hurrell <greg@hurrell.net>