I think we should restrict this path to js_profiles_path folder because of security reasons. Check e.g. splash.proxy.ProfilesSplashProxyFactory._getIniPath function.