We are currently trying to figure out whether/how we might use SFDX.
Our org has FinancialForce Accounting installed. This managed package is required by several other managed packages and it heavily integrated into our code-base (of course, without the use of any wrapper class).
To install FinancialForce Accounting, a password is required. Or, at least that is the error reported by sfdx force:org:mdapi deploy.
Assuming someone in our org knows or can recover the password, will it be possible to use SFDX to script deploying this package to scratch orgs?
If so, how can we include the password within our project so it would be available to SFDX?
Would it be possible to do this in a secure way, limiting exposure of the password?