Looks like the standard way of storing settings of Azure roles is under tag in the .cscfg file. Looks convenient, but the file is
Check the SQL Azure blog, they blogged exactly about this!
also, previous posts at http://blogs.msdn.com/b/sqlazure/archive/tags/security/