make sure my.cnf is not world writable