Geronimo Datasource password in config.ser file

Question

If I understand correctly, datasource passwords are stored in the config.ser file. Can these passwords actually be read or are they encrytped?

Thanks, Rohit