non windows user database connection string

Should I put any thing like this in my configuration data file from a security standpoint? Also even if I don’t put this in configuration data file but prompt for it, how can I keep it secure in the mof file it generates? Thanks.