For the HipLocal case study, a security audit reveals that database credentials for their Compute Engine-hosted MySQL databases are stored in plain text on persistent disks. To mitigate the risk of credential theft, what action should HipLocal take?

Corrections/Clarifications:

• Removed redundant phrasing ("recent security audit discovers" → "a security audit reveals").
• Simplified the question structure while preserving intent.
• Ensured technical accuracy (credentials stored on persistent disks, not just "disks").