Sounds like you're going to put this script "somewhere else" to be run by "someone else"?

We have jobs run on a utility server using a service account, and only accessible by trusted employees. We'll put sensitive information in configuration files on the server, where the "unworthy" cannot get to it.