Consider hashing the PSKs so they aren't entirely plaintext in the DB. Not sure if the security is worth it here, but it's something to mull over.