Always honor config kdf override