MySQL passwords are stored as plaintext in environment variables

Passwords should be stored as secrets not plaintext. This could pose a security issue for some customers.

Passwords for system-mysql are exposed via the following environment variables (this list might not be extensive):

• MYSQL_USER_PASSWORD
• MYSQL_ROOT_PASSWORD
• DATABASE_URL