hide database credentials