How can I avoid specifying a plain password for my sql connection

Include a sql trusted connection, or put the connection string as encrypted data in the registry.
Refer

• FIX: Stronger Credentials for processModel, identity, and sessionState
• How To Use the ASP.NET Utility to Encrypt Credentials and Session State Connection Strings