The new 12c encryption_pwd_prompt parameter
allows you to specify whether Data Pump should prompt you
for the encryption password, rather than you entering it on
the command line.
The default is "no" and you can specify the
encryption_pwd_prompt and this parameter can be used with
both expdp and impdp.