DB_ALL_CREDS should be disabled by default

[SeeRM #8699]
Land #2678, DB_ALL_CREDS should default to false
Merge remote-tracking branch 'rapid7/master'