asp.net - best way to protect the machinekey other than dapi/encrypting web.config -

so need sso solution means both consuming website need same machine key.

is there way can encrypt machine key since it's stored plain text? aware can encrypt web.config , dapi stuff.

is there other way since both seem compromised if attacker gains access server itself?