make hash algorithm configurable
encrypt credentials in app, hash secret when used as key