security: when supplying password as arg it is overwritten in the ps table with XXX. (On BSD based platforms this does nothing.)