Building a Discourse image without baking in the database password?

Would it be enough to push a dummy value to that environment var after the db migration completes? There are hooks for that, post migration, I’m sure.