how to encrypt credentials of basic_auth in client url

[RushikeshChanakhekar]

I want to install promtail on windows VM where I have to give credentials for basic_auth for client url as I have to collect logs of VM and push it to loki which is deployed in another cluster with enabled ingress. These credentails should be somehow encrypted so that those are not visible in promtail-config.yaml file directly.

clients:

• url: http://<host_name>/loki/api/v1/push
  basic_auth:
  username: "### user"
  password: "### password"

Above user and password should be encrypted.