pgbackrest - hiding the encryption password

Currently on our RHEL 7.8 system, /etc/pgbackrest.conf is root:root and 633
perms.  Normally, that's ok, but is a horrible idea when it's a plaintext
file, and stores the pgbackrest encryption password.

Would pgbackrest (or something else) break if I change it to
postgres:postgres 600 perms?

Is there a better way of hiding the password so that only user postgres can
see it?

--
Angular momentum makes the world go 'round.