If your backup uses the same credentials as production, a single breach destroys both. Here is how to fix it.