title: Mongoose hide password in URI
body: <p>With <code>mongoose.connect('mongodb://username:password@host:port/database?options...');</code>, which I use in a script, I don't suppose there is any real way to hide the password? </p>
  
  <p>Should I even be concerned if the Mongodb is only listening on 127.0.0.1? If my server can get exploited then the can just cat that script to get the password. </p>