...
In ACLI 11.0.0, the default syntax for referring to key store values is with using a variation of that syntax of the form ${secret:my.secret} (note the addition of the secret: prefix).
Because the key store is password-protected, we require the secret: prefix to consult the key store only when necessary. This requirement can be disabled by setting To disable this requirement, set the environment variable ACLI_SECURE_PROPERTIES_SAFE_MODE=false.
When disabled, the key store is consulted for variable names that are not found in the acli.properties file or the environment, but this may result in an interactive prompt to supply a password!
...