On further reading it looks like im better off just replacing the encrypted data in the web config and re-encrypting them on the new server.