sasl-xoauth2-tool: avoid leaking a secret on the command line via --client-secret

help integrating more smoothly with postfix
