I'm seeing info about using an ODBC connection instead. That way the credentials would be masked. Isn't that a big performance hit though?