second pass - add db credentials at deploy time