make sure db credentials aren't tracked