```ruby
passwords = EncryptedPasswords.new(node, node["percona"]["encrypted_data_bag"])
replication_sql = "/etc/mysql/replication.sql"
server = node.percona.server

# define access grants
template replication_sql do
  source "replication_#{server.role}.sql.erb"
  variables(replication_password: passwords.replication_password)
  owner "root"
  group "root"
  mode "0600"

  only_if do
    node["percona"]["server"]["replication"]["host"] != "" ||
      node["percona"]["server"]["role"] == "master"
  end
end

# execute access grants
if passwords.root_password && !passwords.root_password.empty?
  execute "mysql-set-replication" do
    command "/usr/bin/mysql -p'#{passwords.root_password}' -e '' &> /dev/null > /dev/null &> /dev/null ; if [ $? -eq 0 ] ; then /usr/bin/mysql -p'#{passwords.root_password}' < /etc/mysql/replication.sql ; else /usr/bin/mysql < /etc/mysql/replication.sql ; fi ;" # rubocop:disable LineLength
    action :nothing
    subscribes :run, resources("template[#{replication_sql}]"), :immediately
  end
else
  execute "mysql-set-replication" do
    command "/usr/bin/mysql < /etc/mysql/replication.sql"
    action :nothing
    subscribes :run, resources("template[#{replication_sql}]"), :immediately
  end
end
```

Simplify password usage for mysql client
user
```ruby
require 'shellwords'

passwords = EncryptedPasswords.new(node, node["percona"]["encrypted_data_bag"])
replication_sql = "/etc/mysql/replication.sql"
server = node.percona.server

# define access grants
template replication_sql do
  source "replication_#{server.role}.sql.erb"
  variables(replication_password: passwords.replication_password)
  owner "root"
  group "root"
  mode "0600"

  only_if do
    node["percona"]["server"]["replication"]["host"] != "" ||
      node["percona"]["server"]["role"] == "master"
  end
end

root_pass = passwords.root_password.to_s
root_pass = Shellwords.escape(root_pass).prepend('-p') unless root_pass.empty?

execute "mysql-set-replication" do
  command "/usr/bin/mysql #{root_pass} < /etc/mysql/replication.sql"
  action :nothing
  subscribes :run, resources("template[/etc/mysql/replication.sql]"), :immediately
end
```
assistant