Comment by Varriount

> In general it is a bad idea to store secrets in the database itself

Perhaps my ignorance is showing but do hashed passwords count as secrets? Because those are usually stored in databases.