passdb/secrets: use db_open_trans()