We should encrypt at least the DSN when setting the environment variables. This would have to be supported in the platform specific libraries as well.