extract sensitive config parameters to untracked config file.