Externalizing sensitive config info