Currently, the sslPEMKeyPassword is visible as plain text. While this is not a direct compromise of the key, it goes against best practices for exposure of passwords in logs and non-privileged commands.