There is logic that stores the /flag value after encrypting it. Is the approach of obtaining a secret value using a vulnerability where the key-value value of the config object can be arbitrarily modified on the /config side to obtain a flag value by decrypting it?