Currently, passwords need to be in plain text in the deployment env file.
Allowing the SMTP password to be alternatively provided via a file path (e.g. with env variable SMTP_PASSWORD_FILE) would enable secrets management support (with Docker secrets).