JDBC security needs a datasource