Client-side encryption We wouldn't be in backup business for long if we stored anything in plain text
:)
Upon entering encryption key it is actually immediately encrypted, obfuscated and only then sent to the machine via secure connection.
You can't really extract the password from the config file in any way.