no more public facing database passwords