only create database/atc password if external-db not used

[thomasmitchell]

create an inferred feature that is the negation of external-db and make the credential under that condition.