reference db password in secrets file