Currently the configuration files support environment variables but setting secrets in this manner strongly discouraged due to the values being exposed.
Ideally we'd prefer to mount these secrets as a file as deployment time instead.
If you could update the docker image so that mounting secrets files is supported then that should allow us to tighten up the security around these features.