Move config.inc to config.inc.php to avoid leaking passwords