Exposed Access Credentials Where do we hide *%db.inc%*?