Description

Use Nones to detect when unset, because the empty string is a valid password. In particular

passwd = passwd or password_from_file

would have used password_from_file if passwd was the (falsey) empty string.

It probably worked as expected because password_from_file was also returning the empty string when not available, but that is an awkward place to put the true default.

I'm not yet smart enough to write a meaningful test for the CLI behavior, but did exercise this locally.

Checklist

• I've added this contribution to the changelog.md.
• I've added my name to the AUTHORS file (or it's already there).
• I ran uv run ruff check && uv run ruff format to lint and format the code.