doesn't default to sanitize defaults if config isn't set