According to your configuration document
I setup /etc/default/puppetdb with password to connect to postgresDB
- Modify this if you'd like to change the memory allocation, enable JMX, etc
JAVA_ARGS="-Xmx192m -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/puppetdb/puppetdb-oom.hprof -Djavax.net.ssl.trustStore=/etc/puppetdb/ssl/truststore.jks -Djavax.net.ssl.trustStorePassword=<PASSWORD>"
Starting puppetdb and entering the command `ps -ef` the password is visible than to all users, what is imho very ugly.
Please provide a different approach to hand over trustStore password to java.