grant only required privileges not all to mysql user
Separate passwords for MySQL and SSH users