Creating a key for ssl connection without the clear text password

I was following below link to enable SSL.

http://www.gemstone.com/docs/html/gemfire/6.0.0/SystemAdministratorsGuide/security.6.33.html

As is metnioned on this link, specifying the truststorepassword and keystorepassword in plain text is risky. it is advised to use PKCS , but when I generate a PKCS key, it again ask me for keystorepassword.  For Authentication where I have Authenticator , it can still work as I can generate key and password which than I can later set in :

security-cipherpass-filepath

security-cipherkey-filepath

But How do I setup SSL communication to use encrypted cipher files?