>But if someone types 'ps -ef' command, the whole command line will show up
>and he can see the password. This happens on Solaris system; on AIX, the
>'secretexxxx' will not be shown.

Yes, but what are the relative *SM client levels?
The client is supposed to blank the password, but various levels have
been faulty in failing to do this, as decribed in APAR  IX73950.
Consider going to the latest client level within your version-release,
or to a higher release-within-version that is compatible with your
server.
   Richard Sims, BU