The transport of your configuration between your computer and Runway is safe-guarded by TLS/SSL, and then encrypted at REST (in our database with secret keys rotated on the regular). Once an application is deployed, the config will be injected in your running container as environment variables and is available in clear text again.