passwords for DB access is stored outside backup or www access