if I'm setting up SSL for the Flink Operator, following the example, is there a way for me to read

security.ssl.rest.key-password

from a k8s secret and not commit it? and more generally is there a way to use certmanager's keystore/truststore with Flink outside of heavy initcontainer work?