title: ActiveMQ - encrypted passwords
body: <p>We are new to ActiveMQ and have read the <a href="https://activemq.apache.org/encrypted-passwords" rel="nofollow noreferrer">documentation on encrypted passwords</a>.</p>
  <p>The documentation talks about setting an environment variable (i.e. <code>ACTIVEMQ_ENCRYPTION_PASSWORD</code>) to hold the encryption password, start ActiveMQ, and then unset that environment variable. But how will this work in the case of say a server restart? We can’t put that encryption password into any systemd service file.</p>
  <p>Our security policies do not allow for the encryption passwords to remain in any configuration or settings files especially since the decrypt mechanism is also available on the same host via <code>bin/activemq</code> commands. So if a bad actor gets into the host he can get the secret and decrypt to get the real password.</p>
  <p>Any alternatives?</p>