Avoids leaking the plaintext password via shell history/`ps`/process listings. --email/--name stay as CLI flags (not sensitive); password is now read via a masked interactive prompt using only Node built-ins (readline + raw-mode stdin), no new dependency.