This directory should be read-protected by anyone but the owner, i.e. mode 0700. No idea about the Windows equivalent.