Hiding credentials in your config files can be done with a bit of coding. You can encrypt the connection strings section and the app setting sections of your applications config, and Windows will read it as if it wasn't, letting your app run more securely.
Full video: • How to Encrypt and Decrypt Connection...