When I went to set up nodes, I was surprised to see the login creds being cached in ~/pf9/...

While this config/content is not needed after node has been set up, would be better practice to allow for a prompt "Leave password blank if you want to be prompted for it during subsequent commands"

Having a "join a single node" credential/bootstrap key available from portal would also be a nice way to handle - something other than your actual 'full login to Platform9 password'.

Would also be good to add a user suggestion output at the end of the node config step offering to remove credentials.