This directory should be password-protected unless you want anyone to be able to mess with the database.