With the environment variable set to "Development," for example, ASP.NET Core first uses the values in a file called appsettings.development.json and only uses the values in the appsettings.json file ...

You can store encrypted values in your ASP.NET Core configuration file and seamlessly decrypt the values as you retrieve them. But there are, at least, two issues that you'll need to address.