Thanks for the suggestion! The way it could be done is that the config should have secret key param and I could use that to encrypt/decrypt. I will open an issue over at github.