made Database::on()/off() private forcing use of db_scoper