backup script contains password, should not be readable except by user