Modifying config.yaml in Rancher UI

For context I’m trying to follow this doc for CIS hardening:
https://docs.rke2.io/security/hardening_guide/#rke2-configuration
And I have clusters setup in Rancher 2.5.5 using EC2.

That doc says to set the secrets-encryption and profile keys in the config.yaml file before installing RKE2. How do I set those in the Rancher UI? If I edit a cluster then by “Cluster Options” hit “Edit as YAML,” is that it? And at what indention level would I add those keys in the yaml, top?