I don't think there's a magic way to do this, if your app can connect to the database and someone has access to your app server - they have access to your datab

I don't think there's a magic way to do this, if your app can connect to the database and someone has access to your app server - they have access to your database as well.