The configuration package should be updated with sensitive information manually. After that configuration file needs to be stored on server and added to during execution time.