apply also reads `[user]` section