You need to add a sensitive configuration setting to store password. Where your customizations will be taking into account security?