I don't think that it is possible to prevent opening a file. But you can put them in system folders e.g. %PROGRAMDATA%
. Not exactly what you are asking for but hides them at least from an "average" user and is a common practice.
You could also serialize and deserialize your setup files in binary format.
Another way is - like you proposed - crypting them.