Rather than storing superuser credentials in AdminSettings.php, it might be useful for some users to let the DB superuser user/password be prompted or passed as parameters to maintenance scripts, like with 'mysql' command.

This could be slightly safer as well since the superuser credentials would not be available for reading by the web scripts.

Version: unspecified
Severity: enhancement