Allow secrets to be specified separately in secrets.conf
Make database authentication with a password work

The db => sub { … } closure had access to $conf, but that didn't save it
from our later deleting $conf->{db_pass}. This means the code was never
tested against a database that required a password. Oops.

Thanks to Luc St-Louis for finding the bug.