s4:param: pass flags via secrets_db_connect() to ldb_wrap_connect()