title: using securestring for a sql connection
body: <p>I want to use a SecureString to hold a connection string for a database. But as soon as I set the SqlConnection object's ConnectionString property to the value of the securestring surely it will become visible to any other application that is able to read my application's memory?</p>
  
  <p>I have made the following assumptions: <br>
  a) I am not able to instantiate a SqlConnection object outside of managed memory <br>
  b) any string within managed memory can be read by an application such as <a href="http://www.acorns.com.au/Projects/Hawkeye/" rel="noreferrer">Hawkeye</a><br></p>