My technique (see metabbotconfig) is to keep the passwords in a text file that's not in version control. If you want to read passwords with getpass, I suspect you'll need to do it in the buildbot.tac, and then stick the result somewhere it can be used later -- though I don't even know if that will work. Dustin