Special characters in Oracle password causes ORA-00922

Connected to oracle_enhanced://SYSTEM@198.51.100.13/MYDB
Connected to redis://system-redis:6379/1
OCIError: ORA-00922: missing or invalid option: CREATE USER MYUSER IDENTIFIED BY **********
Couldn't create database for {"adapter"=>"oracle_enhanced", "encoding"=>"utf8", "pool"=>5, "username"=>"MYUSER", "password"=>"**********", "port"=>1521, "database"=>"MYDB", "host"=>"198.51.100.13"}
rake aborted!
ActiveRecord::StatementInvalid: OCIError: ORA-00922: missing or invalid option: CREATE USER MYUSER IDENTIFIED BY **********
stmt.c:243:in oci8lib_250.so
/opt/system/vendor/bundle/ruby/2.5.0/gems/ruby-oci8-2.2.6.1/lib/oci8/cursor.rb:131:in `exec'
/opt/system/vendor/bundle/ruby/2.5.0/gems/ruby-oci8-2.2.6.1/lib/oci8/oci8.rb:272:in `exec_internal'
/opt/system/vendor/bundle/ruby/2.5.0/gems/ruby-oci8-2.2.6.1/lib/oci8/oci8.rb:263:in `exec'
/opt/system/vendor/bundle/ruby/2.5.0/gems/activerecord-oracle_enhanced-adapter-1.7.11/lib/active_record/connection_adapters/oracle_enhanced/oci_connection.rb:447:in `exec'

$ echo 'apiVersion: apps.3scale.net/v1alpha1
kind: APIManager
metadata:
  name: 3scale-apimanager
  namespace: 3scale
spec:
  system:
    image: 'docker-registry.example.com:5000/system-oracle:2.10'
  wildcardDomain: apps.example.com' | oc create -f -

$ oc create secret generic system-database \
    --from-literal=URL='oracle-enhanced://MYUSER:********@198.51.100.13:1521/MYDB' \
    --from-literal=DB_USER=oracle \
    --from-literal=ORACLE_SYSTEM_PASSWORD=******** \
    --dry-run -o yaml | oc replace -f -

$ oc rollout latest system-app