Reconsider prompting for passwords by default

[mcpherrinm]

Certainly we almost never use password-protected private keys (that's what Keywhiz is for, after all). We should require a flag.