When the Device.Backup.Running Config activity is run using the Cisco.Firewall.ASA script the backup will issue either of two commands to generate the config. Which command is issued will depend on the connection method to the device.

SSH Connection:

If the connection method is SSH then this is deemed to be secure and so the 'more system:running-config' command will be issued which will generate the backup with pre-shared key information included.

Telnet connection:

If the connection method is telnet then this is deemed not to be secure and so the 'show running-config' command will be issued which will generate the backup without pre-shared key information included.