Providing the password on the commandline is bad for the user's security as it will be visible in the process tree and eventually also in the shell's history.
I recommend making it at least optional to read the password from stdin (for instance a first line prefixed by password:) and/or from an environmental variable (perhaps easier to implement) that can be set and unset immediately from a wrapper.