Best Place to Hold Credentials Besides DB or Registry
<p>Is there any other place that makes sense to store credentials for third party APIs that you use to make API calls for Facebook, PayPal, etc.?  I'm tempted to store sets of credentials (Sandbox, Live), etc. in my web.config and the in a Profile.cs class create a couple methods to go out and populate the profile custom object's properties with the values from my web.config based on an enum that holds the type of Profile account I want to get details for.</p>

<p>So for example I have an enum for PayPal called PayPalProfileType that has value ExpressCheckoutSandbox and ExpressCheckoutLive</p>

<p>In the constructor I'm passing in one of these values then calling a method SetSandboxValues() or SetLiveValues() dependong in what value was passed into my constructor.  The SetSandBoxValues for example would set my Profile.cs's properties like ApiUserName, ApiPassword, ApiSignature with the values grabbed from my web.config in a section that has all sandbox values in my web.config.</p>

<p>I know this sound hacky but thought I'd throw it out there.</p>
