SECURITY: Remove $config[db][password] when $config[debug] is TRUE
No need for global config