Do a proof of concept. "openssl genrsa" will make the name of the

file part of the password prompt unless it's standard input...

More will be added...