Exchange Activities Secure handling of the password?

There are several proposed solutions for this here:

My solution was to store the credentials in Orchestrator for security. That way I could read the password from the asset, convert it to a string, and pass it to the activity all without revealing the password during the process.