It's very rare for a unix app to print * characters in place of a password in vt100 apps (like a shell script). It's generally accepted that you only need * character for gui apps where the text box currently focused isn't clear (like a dialog box).