Connection strings and other credentials stored in application options gives all the capabilities within the perform app precisely the same set of permissions during the related source. Look at minimizing the amount of capabilities with usage of certain qualifications by relocating capabilities that do not use All those credentials into a different