Ah, that's valid, but at least base64 encode the password (for more entropy per character). It doesn't really matter anyway, if you're using a long secret (and nothing stops you, since it's not like you need to remember it).

Good tip, thanks. What's the difference between with and without -s?