EE7 introduces the ability to reference a moniker or token
instead of an actual password in configuration, annotations
(Password Aliasing feature) and goes on to describe annotations
and deployment descriptors that are required to support
aliasing.

The proposal is to require application servers to support the
specification (and resolution) of Password aliases in all
Configuration Properties of a JavaBean that are marked
as confidential (Section 5.3.7.6 of the Connectors 1.6 specification),
and the standard "Password" Configuration Property.