Building and Running an ASP.NET Web Client Application › Support for Encryption › Edit Encrypted Sections of Configuration Files
After deployment, the user can edit the encrypted sessionState or connectionStrings sections in the application if the user has administrative privileges.