All values are stored only in encrypted form. The data is stored only in the database server and the keys for encrypting are only available on the application server. This ensures that if somebody is able to log into the database he won’t be able to read the configuration values.