I think I agree with Bear. I have read about a variety of approaches for storing the configs encrypted, but never actually done it. Doesn’t feel right to me.