Get DB host from parameters.yml
Don't erase credentials for API users, their plaintext password is the API key
Log API calls