src/auth-shadow.c: flush terminal input before reading password