manually keep track of beans instead of component scanning; it was getting cumbersome to make sure they all ended up in the correct app context
break data source out, some re-organization, initial encryption work
encrypt and store secrets