Obfuscating your commandline is racy. The only fix for issues like this is to not pass passwords on the commandline, except when debugging.