Install rule: credentials stay in inc/config.local.php, not in shared code. Run the installer only when install.enabled is temporarily true.