thanks https://gist.github.com/khskekec/6c13ba01b10d3018d816706a32ae8ab2
its possible to unmarshal a PasswordFile path to a read string. this is nice for docker secret setups. also adds a GetPassword method which checks if both Password and PasswordFile are declared.