Clarify the scope of encrypting sensitive settings in watcher, which fields are encrypted and if users can have their own encrypted fields.