or having at least read only access to the config, that would be a good start