Allow manual per-tenant override of DB user connection password