How secure are the credentials stored in opmanager. Is it hashed or stored as a flat file ?

Can someone retrieve these credentials ?