it will be great to have the ability to execute the command with the option not to pass the password...for example:

db.auth( <username>)

then a prompt will be displayed for password. This will make sure anybody near by can't see the password visibly in the screen.