move to clean crypt handling

ask-secret.go

@@ -3,6 +3,7 @@ package main
 import (
 	"bufio"
 	"bytes"
+	"fmt"
 	"io"
 	"os"
 )
@@ -38,6 +39,8 @@ func askSecret(prompt string) []byte {
 		fatalf("failed to read from stdin: %v", err)
 	}
 
+	fmt.Println()
+
 	s = bytes.TrimRight(s, "\r\n")
 	return s
 }