Ability to hide passwords from catalog connector config files

[tooptoop4]

Rather than have passwords (ie mysql, redshift or others) in plaintext could use a jceks to store the password like in below example:

https://mapr.com/blog/5-steps-to-remove-hive-metastore-password/

[findepi]

This has been discussed on the user group in the past: https://groups.google.com/d/topic/presto-users/X-K5vmkiWus/discussion
Would you be so good as to reply to @electrum's last question in that thread?

Can you explain more about the problem you are trying to solve?

[tooptoop4]

We are trying to deploy Presto in large, highly regulated corporation (10k+ employees) which handles sensitive customer data. Problem is our 'enterprise security' team have to approve all new app deployments and they want to block our presto deployment due to the fact plaintext db passwords are visible in these properties files.

GPG .rc and .passphrase, KMS (we use ec2), .jcek, or encrypted password string would be enough for them to approve.

[tooptoop4]

gentle ping

[tooptoop4]

trinodb/trino#1124 trinodb/trino#1912

[tooptoop4]

yet to try:
Trino release notes: https://trino.io/docs/current/release/release-322.html
Github Code merge: trinodb/trino#1521