Make sure subtoken config is generated

Even when virtual users are not needed, subtoken config is used for local_root as well