make sure new databases created through plugin API are only accessible to _admin

This commit was sponsored by The Hoodie Firm
with support from NLnet: http://nlnet.nl
http://go.hood.ie/thehoodiefirm