Add hadoop credential Provider to LdapRealm

Currently ldapRealm.contextFactory.systemPassword has to be set in plaintext in shiro.ini. I would like to use a credential store to use the alias syntax like in Knox ${ALIAS=systemPassword}

Maybe I am just missing something. In that case I would like the documentation on that feature to be improved.