By default, backup routing neighbor is configured with remote-as and next-hop-self. You can provide md5-password as a fabric setting which is applied on the neighbors.
Note
You can modify the MD5 password for the backup routing neighbors only by configuring and re-configuring the fabric.
efa tenant service bgp peer create --name <bgp-peer-name> --tenant <tenant-name> --ipv4-uc-nbr <device-ip,vrf-name:neighbor-ip,remote-asn> --ipv4-uc-nbr-bfd <device-ip,vrf-name:neighbor-ip,true|false> --ipv4-uc-nbr-default-originate <device-ip,vrf-name:neighbor-ip,true/false> --ipv4-uc-nbr-default-originate-route-map <device-ip,vrf-name:neighbor-ip,route-map>
efa tenant service bgp peer update --name <bgp-peer-name> --tenant <tenant-name> --operation peer-add --ipv4-uc-nbr <device-ip,vrf-name:neighbor-ip,remote-asn> --ipv4-uc-nbr-bfd <device-ip,vrf-name:neighbor-ip,true|false> --ipv4-uc-nbr-default-originate <device-ip,vrf-name:neighbor-ip,true/false>
efa tenant service bgp peer delete --name <bgp-peer-name> --tenant <tenant-name>