How to avoid naked password in configuration files

To configure the database to be used by hydra the following is the configuration as per the documentation.

DSN Layout:  `mysql://user:pw@tcp(host:port)/database?someSetting=value&foo=bar` .

If we want to avoid naked password in the configuration file for additional security compliance, what would be a recommended solution for the same.

Thanks and Regards,

You can use an environment variable instead