don't expose mysql by default