setup rights on enc and config