no need for the SQL file to be world writeable
added a note about Samba credentials