Fixme note about MongoDB setup being insecure