title: Encrypting sensitive information in JBoss configuration
body: <p>The standard data source configuration in JBoss requires the username and password of the database user to be in the xxx-ds.xml file. If I define my data source as a c3p0 mbean I encounter the same issue.</p>
  
  <p>Is there a standard way to have the user and password encrypted? What is a good place to save the key?</p>
  
  <p>This of course relevant to tomcat too - context.xml files, spring configuration files, etc.</p>