donate: fix db secret handling