the mysql auth info should not be world readable