prompt for password if bucketname is supplied and password is not

Passing a password via command line args is not secure, and while we have another option via envvars it'd be handy to be prompted for password and I'm sure someday someone is going to ask for it. Either just automatically prompt if a bucket name is provided or take -P - as an indication that it should be prompted for is what I'd recommend.