The simplest way to address this is to use environment variables, which the provider will read in natively rather than configuring them in the provider block itself. You can find examples here:
https://registry.terraform.io/providers/PaloAltoNetworks/panos/latest/docs#username