hide the db password