Major Description
Java's keytool(for Windows) allows you to specify the keystore/truststore password with an external file in addition to a string argument.
-storepass:file secret.txt
http://docs.oracle.com/javase/7/docs/technotes/tools/windows/keytool.html
It would be nice if Kafka could offer the same functionality allowing organizations to separate concerns between standard configs and 'secrets'.
Ideally Kafka would add a secrets file property to the broker config which could override any ssl properties which currently exist within the broker config. Since the secrets file property is only used to override existing SSL/TLS properties the change maintains backward compatibility.