How to have the web.config file confidential texts like username, passwords encrypted.

Background: As we are aware, the confidential settings in the web.config shows the username , passwords and anyone who has the access to it can note it.

Expected Solution:

How to overcome this. What are steps to have this encrypted on a on premises Acumatica site. Also, can the Acumatica SaaS site’s web.config app settings be encrypted by having a publictoken?