The script should only be readable by those who need to use it and not by anyone else. For example, if the script is part of a dynamic website, it should only be accessible by the webserver program and not by anyone happening to pass by the file-system.
CountZero
"If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law