Support Docker secrets for supplying bind passwords

[evan-chaney]

Having credentials in labels seems like an insecure way of doing things, although I understand supporting Docker secrets may be a lot of work.