DCU/CLI how to set bios password for bios updates not in cleartext during scripting.

Dear community,

at the moment we are busy with implementing intune and we really want to increase our security on the laptops with setting a bios password and other security measures. After setting a bios password we got the following problem, Dell command update does not want to update unless it has the bios password.

While trying to find a way to implement it in our script i only could find a way where the password is just in plain text inside the script, which i do not like. i could find a way of encrypting it but as far as i understand the documentation this is only for the command /applyupdates. 

Is there a way of making the password encrypted, so if the script is compromised people do not have directly access tot the decrypted bios password. Here is an example of the command /configure commands i am using. 

/configure -schedulemonthly=1,11:30 -lockSettings=enable -scheduleAction=DownloadInstallAndNotify -userConsent=disable -silent -outputLog=$logfolder\Delllog.log -biosPassword="example"

i hope someone could help me!