hosting: protect create_resources from undef *_databases
hosting: passwords do have to set always