temp workaround for allowing upstream db connections