You might want to use the correct setting name: GRAYLOG_REST_TLS_KEY_PASSWORD (rest_tls_key_password).
GRAYLOG_REST_TLS_KEY_PASSWORD
rest_tls_key_password