can service account auth token be encrypted and stored in credentials file

Auth token for service account are stored in a credentials file under ~/.gsutil/ in clear text. Is there a way to encrypt the credentials file and gsutil read the encrypted credentials file, decrypt the tokens at runtime?
the objective is to not store tokens on the server in clear text.