A password or secret assigned a string literal embeds a credential in source.
Load secrets from environment variables or a secrets manager at runtime.