Read this First
When the SQL database is initialised the Salesforce credentials (username, password and token) are stored in the sfi.sfi_settings table in plain text. You should therefore ensure that access to this table is restricted to prevent unauthorized users from accessing them.
I will be adding additional options for storing these in the future.