No way to mask default for password type prompts

Following the documented example

@click.option('--password', prompt=True, hide_input=True,
              confirmation_prompt=True, default='MySecretIsOut')

while adding a default demonstrates the issue. It just displays sensitive data in plaintext, maybe it could mask most of the letters or something like that.

[sh4nks]

If you already have a secret you could just check if the password input is empty, and if it is, use the pre-generated secret key.

[jiveman]

I ended up masking it before supplying to default, then unmasking when using it on the other side. It was quick and easy, just thought other’s might like this.