Thanks for the effort, but I think you are right (its not better). What we had done before is set the connection string using an expression from a variable, which is basically the same thing. Both end up storing the password in clear text in a file.