mostly, I'm wondering if there is any way to keep encrypted config items from being decrypted from certain team members, or if anyone with access to the source can decrypt them?>