Hiding or encrypting SMTP password required in app.yml

[fefrei (Felix Freiberger)]

Also, this cannot be fixed: Discourse needs the password to provide it to the SMTP server – so no matter how you store it, there must be a way to read it. (This is similar to how web servers need the private key to their SSL certificate.)