Put the passwords in their own password files (the method recommended since Application Server 8.1) and refer to these files with either the --adminpassword or --dbpasswordfile options.
