Bitcoin Core offers authenticating the RPC connection via a cookie file using the rpccookiefile option instead of rpcuser and rpcpassword. Cookie file authentication is considered more secure than username/password authentication, see [https://github.com/Kixunil/security_writings/blob/master/cookie_files.md] for a discussion. In my estimation it would be an easy-to-implement flexibility and security improvement if CLN supported a bitcoin-rpccookiefile option as an authentication method.