Move private data out of the Web.config file into a separate AppSettings.config file, because this protects private data.