I don't understand the UX you have in mind, just do it like SSH used to do, a non-echo input field?