Credentials store for Gradle

How could I store local security-sensitive properties for use by gradle builds? E.g. repository access credentials.

gradle.properties file does not provide on-disk encryption.
gradle-credentials-plugin do encrypt properties, but requires passphrase to be provided (so we’ve returned to the original problem or even worse).

Possibly solution in the spirit of git-credential-cache integrated into gradle daemon would work.