my $password = '...';  # Not the password, but a shell literal of the password.
system( ... "-p$password" ... );

##</code><code>##

my $password = '...';
system( ... "-p$password" ... );  # Pretend $password is a shell literal.

##</code><code>##

system( ... "-p..." ... );