Inject passwords instead of properties

Otherwise passwords would end up in public build output