It appears this is available starting in 6.3. From the 6.3 release notes: "Support for all OSGI configuration properties to be stored in a protected encrypted form instead of clear text." How do you enable this or is it done automatically?
What I am really looking for is the LDAP Identity Provider bind password to be masked when I view through the CRX. In 6.3, I am still seeing it in clear text. Perhaps that's not what this feature is intended to do.