Oh. I was not aware of that. I'll see if i can come up with sth. else. The idea here is to have the credentials available in the beginning but clear them after they were used so they can't be read from the webapp. I guess restrictive permissions would also be an option for that. Also we hopefully won't need the migrations anymore once the design docs are deployed with the couch. But that is still a bit away.