All tools / mongo-shell should specify the input behaviour when the --password command-line switch is provided without any input. This approach is usually useful in providing password as console input instead of command-line input for security aware applications.