encrypt/decrypt configuration