Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py