The bug

The current implementation of the MySQL-based configuration service won't transfer a database password from the configuration URL (database connection string) into the transient state of the Replication system's configuration. For example, if (any) replication service is being started with the following configuration option:

The service wouldn't know which password to use when trying to open a connection to the Replication system's persistent state:

This log file snippet reveals another problem with the implementation - it's dumping the raw URL including unscrambled password (and possibly, the authentication keys auth-key and admin-auth-key for the REST services) into the log stream:

That needs to be investigated and fixed as well.