protect db credentials