Offer .ini option only when have permissions
Properties: don't keep refs to graph objects

Fixes #2189
mhook: hack around EMET