Add a new 'passwordfd' command and '--passwordfd' option

[steelman]

This allows receiving the password from a parent process.

The code for reading from the file descriptor is a repuprposed password_eval() function removed in commit e16c5d9 ("remove password_eval() which moved to eval()").