We should, at the very least, hash this field so it's not in plain text. This comment probably isn't relevant to the database itself, but if anyone agrees/has another solution then we should create an issue before merging this.