Secure config info

Possibly. Do I have this right?