spring:
  kafka:
    jaas:
      enabled: true
      control-flag: required
      login-module: org.apache.kafka.common.security.plain.PlainLoginModule
      options:
        username: "username"
        password: "{cipher}password"

Take a look inside KafkaAutoConfiguration.class