Now this is kind of the dark side of self-hosting. And who cares with a blog, pretty much all of the db is meant to be public (just in a different form), worst case, you get the password hash? ok.
But if I were to self host a replacement for 1password, well. Not so fun anymore.