It seems like there's no resource for shared configuration and pipeline variables are all in plaintext, with no option to encrypt them.