Don't allow /ghost/ subdir

fixes #1755

- adds extra validation to config loader
- adds tests for config loader and validation