Function SecretDirectory

server/server.go:898–903

SecretDirectory returns the directory DuckDB should use for persistent secrets for this instance, or "" to leave DuckDB's default in place. DuckDB defaults persistent secrets to $HOME/.duckdb/stored_secrets, independent of the database file. On a worker that means a CREATE PERSISTENT SECRET lands i

(cfg Config)

// When the last reference is released, the DB is closed and removed from the pool.
func (s *Server) releaseFileDB(username string) {
	s.fileDBsMu.Lock()
	defer s.fileDBsMu.Unlock()

	entry, ok := s.fileDBs[username]
	if !ok {
		return
	}
	entry.refs--
	if entry.refs <= 0 {