Thanks for the tips. I played around with passing variables to Splunk CLI using the examples you had in this post and was able to change passwords w/o exposing the password on the screen or storing the password in a file.
'#!/bin/bash
read -sp "Enter Current Password: " currPass
echo
read -sp "Enter New Password: " newPass
/opt/splunk/bin/splunk edit user john -password $(echo $newPass) -auth john:$(echo $currPass)'
... View more