[u801e]

> And at least the way I figured out how to do it, it involves a cleartext password sitting on my filesystem

git credential allows for programs to query it for credentials based on the server you're connecting to and store it for a configurable period of time in memory. So you don't have to store your password in the config file. You would enter it on the command line when you invoke git send-email and if you run the same command within the configured time period, you won't have to re-enter your password.