Can I hide my password for data at rest encryption key?
Usually database is started as a service in background, so entering keys at startup will not be possible.
To separate key(s) and data you have the following options:

store keys on a separate device which can be unplugged after start of database server.
use an external key management system, e.g Eperi which also supports key rotation.