Securely Configuring Passphrases in Script

RouterOS Wireless Networking
1

I am working on creating reproducible scripts to configure my mikrotik devics.

I don’t wish to have the passphrase for my /interface wifi security lines in plain text.

I can encrypt the file using something like git crypt, and unencrypt when I want to use the scripts, however it would be preferable to not have a plaintext passphrase in script.

Are there any options to pass the value from another file or env variable for passphrase as alternative to below?

/interface wifi security
add name=common-auth authentication-types=wpa2-psk,wpa3-psk passphrase="some_password_here" wps=disable
2

Nevermind, I believe I can just add some global variables prior to running setup script manually and reference them in the script

https://wiki.mikrotik.com/wiki/Manual:Scripting#Environment