{
    my $rec = $DB->get('mediawiki')
        || $DB->new_record('mediawiki', {type => 'service'});

    my $pw = $rec->prop('DbPassword');

    return "" if $pw;
    if (not $pw or length($pw) < 57)
    {
      use MIME::Base64 qw(encode_base64);

      $pw = "not set due to error";

      if ( open( RANDOM, "/dev/urandom" ) )
      {
          my $buf;
          # 57 bytes is a full line of Base64 coding, and contains
          # 456 bits of randomness - given a perfectly random /dev/random
          if ( read( RANDOM, $buf, 57 ) != 57 )
          {
              warn("Short read from /dev/random: $!");
          }
          else
          {
              $pw = encode_base64($buf);
              chomp $pw;
          }
          close RANDOM;
      }
      else
      {
          warn "Could not open /dev/urandom: $!";
      }

      $rec->set_prop('DbPassword', $pw);
    }
}