If you have it exposed to the public, I would.
Unless you have some kind of method of making sure they don't overwrite the config file.

Otherwise any of the public would be able to change the database which is used.