Would it be possible to specify a fints.password_command that would be executed interactively to acquire the password (e.g. the command outputs it on stdio)? That way I would not have to store my password in the fints2ledger config file, but could use it with a CLI password manager like bw or pass.
