When running a CLI or statedump command with -p flag (prompt for EJBCA CLI password), the tool will prompt me twice for the CLI password (I think).

Example output:

[jboss@manca1 statedump]$ java -jar statedump.jar import --end-entity-password somepasswordrandom -l /opt/ejbca-custom/conf/statedump/ -p
SETTING: --end-entity-password as somepasswordrandom
SETTING: -l as /opt/ejbca-custom/conf/statedump/
Password (p): <- First password prompt.

SETTING: -p as MANAGEMENTCA_EJBCA_CLI_DEFAULTPASSWORD
[Password:] <-- Second password prompt.
Importing dump from directory: /opt/ejbca-custom/conf/statedump