enc.sh: add password confirmation