passphrase-stderr.patch

diff --git a/README.md b/README.md
index 220980f..b0f69da 100644
--- a/README.md
+++ b/README.md
@@ -273,7 +273,7 @@ Enter root keys passphrase:
 Copy `root.json.sigs` back to the repo box and import the signatures:
 
 ``` bash
-$ tuf add-signatures --signatures=root.json.sigs root.json
+$ tuf add-signatures --signatures root.json.sigs root.json
 ```
 
 This achieves the same state as the above flow for the repo box:
diff --git a/cmd/tuf/main.go b/cmd/tuf/main.go
index 137420f..83885ce 100644
--- a/cmd/tuf/main.go
+++ b/cmd/tuf/main.go
@@ -145,9 +145,9 @@ func getPassphrase(role string, confirm bool, change bool) ([]byte, error) {
 		// No environment variable set, so proceed prompting for new passphrase
 		role = fmt.Sprintf("new %s", role)
 	}
-	fmt.Printf("Enter %s keys passphrase: ", role)
+	fmt.Fprintf(os.Stderr, "Enter %s keys passphrase: ", role)
 	passphrase, err := term.ReadPassword(int(syscall.Stdin))
-	fmt.Println()
+	fmt.Fprintln(os.Stderr)
 	if err != nil {
 		return nil, err
 	}
@@ -156,9 +156,9 @@ func getPassphrase(role string, confirm bool, change bool) ([]byte, error) {
 		return passphrase, nil
 	}
 
-	fmt.Printf("Repeat %s keys passphrase: ", role)
+	fmt.Fprintf(os.Stderr, "Repeat %s keys passphrase: ", role)
 	confirmation, err := term.ReadPassword(int(syscall.Stdin))
-	fmt.Println()
+	fmt.Fprintln(os.Stderr)
 	if err != nil {
 		return nil, err
 	}