ASP.NET contains a simple method to encrypt sections of web.config files. It is simple to do this by code and it is simple to do this by command line with the aspnet_regiis tool for web.config files. And although the underlying API isn’t ASP.NET specific, there is no tool like aspnet_regiis for app.config files. I am aware of the workaround “Rename app.config to web.config and use aspnet_regiis”. But maybe there is a better solution?