Similar to killbill/killbill#777, we should support encrypted key/values properties.
To do it, the plugin configuration handlers could look for property values with a specific marker (e.g. ENC(...) and load the proper decryption algorithm based on a global configuration.