Just a general security thing. Don't store your password in your server.cfg file. There are ways to retrieve it if stored there. You should always put your rcon password in your command line arguements. If your host doesn't allow you to edit your command line arguements, talk to your host.