Given the subject matter and target audience, 4.3 should probably include one or multiple methods for securing the database credentials. There are some examples here. I would recommend using the config package with a templated config.yml and connection text along with a .gitignore that names the file just to add that extra bit of security for sensitive credentials.