But... you don't have to use the same user for migrations as you do for your webapp. Like, at all. `manage.py migrate --settings=my_super_secure_settings.py`

But... you don't have to use the same user for migrations as you do for your webapp. Like, at all. `manage.py migrate --settings=my_super_secure_settings.py` Just only run this from a super-secure location during a deployment with a completely different set of credentials.