The -emp and -ep CLI switches should prompt for a password if the user omits it. This would help to avoid having to escape shell characters in strong passwords.
Note that the docs mention that these switches prompt for a password when they do not:
http://maven.apache.org/guides/mini/guide-encryption.html
Arnaud has improved the documentation for this, will file this for a future enhancement.