Postgres Exporter best practices


I am wondering what are the best practices to keep the DSN string for Postgres Exporter?
Especially I am interested in how to keep credentials safe.
I would like to avoid keeping credentials in environment variable or any type of plain text.

Thank you in advance.