Database Passwords Should Not Be Disclosed