It would be really useful is you could set secret values (passwords, API keys…) using the ‘secrets’ feature of Docker Swarm and include them in the config YAML. I see this happening something like:
mqtt:
broker: mqtt.some.place
username: homeassistant
password: !swarm_secret mqtt_password
Which would read the value of /run/secrets/mqtt_password and add it to the config in that place. This doesn’t seem like it would be a hugely complex thing to implement