STIG violation for DB_PASSWORD environment variable

https://stigviewer.com/stig/kubernetes/2021-04-14/finding/V-242415

The password for the database is provided to Keycloak by an envioronment variable which violates a STIG. Could the password be provided by mounting a secret with the value per this configuration:

https://www.keycloak.org/server/configuration#_optimization_by_using_a_configuration_file