use data bag for mysql creds. TODO: encrypt it