You can see this discussion which asks the similar question considering both Redis and MQTT. You would have to modify the source code of GVMD to supply the password to MQTT if you password protect the service.
However, you can further harden access to MQTT via SELinux instead of going through that trouble.