As other secrets on the standalone.xml (like data source passwords)
,
the password should be stored in the vault.
+1
Vaults should be used for this. The good thing is that, AFAIK, no
change
on the agent is required. The subsystem sees the actual clear text value
from the vault.
+1