If the database is not local, and there’s no authentication, what stops someone else from accessing it inappropriately?