Actually maybe the best option is to gate

modules.config

include behind an if/else based on an ENV var not being set (something like

NFTEST_MODULES_CONF_OVERRIDE

) that would then only disable the pipelines module config if explicitly set and be unlikely to be done accidentally by users