Fix interactive MFA repair prompt

sso-mfa/k8s/keycape/refresh-pi-token-live.sh

@@ -24,8 +24,15 @@ KEYCAPE_DEPLOYMENT="${KEYCAPE_DEPLOYMENT:-keycape}"
 KEYCAPE_SECRET="${KEYCAPE_SECRET:-keycape-config}"
 KEYCAPE_TOKEN_SECRET="${KEYCAPE_TOKEN_SECRET:-keycape-pi-token}"
 
-read -r -s -p "privacyIDEA pi-admin password: " PI_ADMIN_PASSWORD
-printf "\n" >&2
+if [[ -r /dev/tty ]]; then
+    printf "privacyIDEA pi-admin password: " > /dev/tty
+    IFS= read -r -s PI_ADMIN_PASSWORD < /dev/tty
+    printf "\n" > /dev/tty
+else
+    printf "privacyIDEA pi-admin password: " >&2
+    IFS= read -r -s PI_ADMIN_PASSWORD
+    printf "\n" >&2
+fi
 if [[ -z "$PI_ADMIN_PASSWORD" ]]; then
     echo "[FAIL] Empty pi-admin password." >&2
     exit 1