This may read better:

    The `username` and `access_key` fields support encryption, so you don't have to