How to add tenant passwords as secret in Loki helm chart

Hello,
i am configuring the loki helm chart, and wants to add different tenants.
But looking at helm charts, we see passwords for different tenants are in plain text.

  tenants:
    - name: rat
      password: ratpass
    - name: goat
      password: goatpass

any idea how can i have them as secrets?

htpasswd -c .htpasswd <username>
kubectl create secret generic loki-basic-auth --from-file=.htpasswd -n loki

values.yaml
gateway:
 basicAuth: 
     enabled: true
     existingSecret: loki-basic-auth

More here: Deploy the Loki Helm chart on AWS | Grafana Loki documentation

Note: the auth credentials are not mapped to tenants. Every authenticated user is allowed to send data to every tenant. Authentication is done on nginx, no user information is send to Loki. Loki only knows the tenant header.