secured db credentials in config file