How about detecting when you read the credentials from the command line, and in that case reinvoke the program without putting the credentials on the command line. (Put 'em in an environment variable, config file, or something else...) A kludge, but perhaps sufficient for your use...