persisting db secrets