Author here - this was just a weekend hack and didn't really expect it to show up here, but thanks for the security related feedback. The setup now uses environment variables.
Have you considered merging your functionality with a package like gnucash which works as an open source account/budget program for families/small businesses?
