All settings into one config file, and www-data can now only sudo 2 files.