use password obfuscation for JMS password