Don't encourage anyone to store plaintext passwords in configuration files.
Make the readme file a bit less unclear.