Safely storing secrets and passwords on PLCnext controllers

Hi Lennart,
thank you for your response!
I am not sure that I understand how the Security Profile will help me. According to Activating the Security Profile on security.plcnext.help this will, among other things, disable SSH login.
While that certainly would make remote attacks harder, our aim is to keep remote access by SSH but still have increased protection for passwords stored on the controller.
If that is (practically) impossible, that would also be useful information.
Best regards,
Daniel