CLIHandler: make read_password an optional class method