Add comment describing how duo_cosign finds its config file.