Use a server-local password file for database backups
MySQL and PostgreSQL jobs can read their password from a file on the protected server during source checks and backups. The file contents stay on that server. This option requires agent v0.15.0 or newer.