A far better strategy, if you absolutely must use a programmatic login or su, is to arrange for login to occur using SSH public/private keys.   The script would present its key to avoid the possibility of an actual password challenge.

Naturally, I am extraordinarily uncomfortable with the idea of a script logging on as root...   Almost as uncomfortable as I am with the notion of a script possessing credentials that would allow (anyone) to do so.