From the documents that he referenced
Once added to the keystore, these setting will be automatically applied to this instance of Kibana when started. For example if you do
bin/kibana-keystore add elasticsearch.username
...
So you don't need to add them to the kibana.yml