And what about using a pepper in addition to a salt? Then a potential attacker requires access to application code as well as the database tables. I can also i

And what about using a pepper in addition to a salt? Then a potential attacker requires access to application code as well as the database tables. I can also imagine some kind of DDOS against the database using the linked system.