Critical bugfix: settings can be readed by anyone