This was identified as an issue in the JDK 7 security checklist:

Availability of mechanisms for secure credentials storage in general (keystore passwords, JNDI pwd, etc). There is a big need across the board, will include JNDI, JDBC, keystore pwds. It should be a standard part of Java.