move authorization config to file not in git