Is there any way to hide the SQL database password from users? Currently, it's plaintext in the local.cf file, a file that has to be world-readable in order for users to be able to use the spamassassin client in an setuid environment. (Thus, setting the file to disallow world reading results in users not being able to read in the site-wide configuration, which sorta defeats the purpose!)
Is there some other mechanism for telling spamassassin about the password without also revealing it to every user that has access to the system? Thanks... /jason
