Add a new unprivileged database user (fxa) and use it for the server

Yeah. Thought about this last night too. This set of privileges here needs to be the same as what we added in db_patcher, so even though I have code to do the password thing when adding the user, this makes it a lot harder for the same reasons you said above.

I suspect we need to say something like "if you're on dev, you should probably have an fxa user with no password and you've probably got mysql running locally" and "if you're on production, you shouldn't be using this stuff anyway, it's just an example".

Conclusion: I dunno either. :)