ActiveMQ pooled connection factory contains attribute password by which is possible to set password which will be used for creating inbound connections (for MDBs).

However it's missing attribute credential-reference required by RFE EAP7-538.

This should be located in model of:
/subsystem=messaging-activemq/server=default/pooled-connection-factory=activemq-ra