Thanks - I know. I think there's always the possibility that the 'malicious' user in question could edit db/configuration files anyway, but it's definitely the

Thanks - I know. I think there's always the possibility that the 'malicious' user in question could edit db/configuration files anyway, but it's definitely the correct thing to do.