protect settings by app.config['...']