more predictable defaults on database credentials