c# - Azure Diagnostics - encrypting connection string in cscfg -

in our project, want use azure diagnostics. fine, except 1 thing, there seems no possibility encrypt azure diagnostics connection string in cscfg file. take configuration part in cscfg, instance (real values obscured):

in above, whole conn string (also accountkey) seen in azure portal. our problem.

link verify: https://manage.windowsazure.com/microsoft.onmicrosoft.com#workspaces/cloudservicesextension/cloudservice/your-cloud-srv/configure

also, can seen in cscfg file. during roll out, not want expose accountkey other parties eg portal administrator. now, question is: possible use encrypted accountkey in cscfg file, or, proposed way activate azure diagnostics in suc manner conn string can decrypted before azure diag activation?

this has work latest azure sdk 2.71 or 2.8.1.

update: if add encrypted conn string cscfg, being eg encdiagconnstring, still possible azure sdk 2.7.1 or azure sdk 2.8.1 programatically start diagnostics, if provide decrypted conn string in azure roles onstart() method?

update2: seems activating azure diagnostics, possible outside cloud service via azure management api (rest api), best option seems using azure powershell cmdlets: https://azure.microsoft.com/en-us/documentation/articles/cloud-services-dotnet-diagnostics/

the 2 options have either store connections strings in app settings / connections strings! app. or use azure key vault store application secrets , access them programatically.