Encrypting and decrypting your configuration sections can be done using command line tools, but also through the .NET API.