I'm working on a bundle and have a question about security. I'd like to generate a value during the bundle install and make that value as difficult as possible for the account owner to get at. I can't store the value in the bundle code due to a restriction. My thought is a custom record encrypted field with no UI access locked down to admin's only. Am I on the right track?