The standard solution for encryption is to use SSL.
Another solution is to use a custom DataSourceKeyResolver. In your DataSourceKeyResolver, you could use any creative and imaginative solution you can think of including encrypting the ibconfig.
Is there any reason that either of these two solutions will not work for you?