less agressive with configs throughout the environment

This will still be backwards compatible but for people wanting to adopt a more secure config splay in their environment they can.