~/.pixeltable/pgdata and ~/.pixeltable/media.
media back, then start Pixeltable again.
Pixeltable does not manage end-user accounts. Put auth on your HTTP layer. Do not expose PostgreSQL port 5432. Do not put long-lived cloud keys in config.toml if the host can use its own IAM role.
pxt secret set (CLI). Table history: Version control.