Config security and visibility for roles