configs are better managed privately by sync