An nmh-specific getpass, to remove dependency on system

getpass()es, which may or may not do what we want (including
flushing input streams, and taking input from stdin in the
absence of a controlling tty).