I don’t know how I would know if they’re encoded. I created them with the command ‘pivpn add’.
I tried to create a new profile with 'pivpn add nopass’ thinking that it might prompt me for a password when run but that didn’t help.