The configuration file is a nice binary blob. A possible way is to give all the options as configuration parameters. With this the pentester is able to configure it in detail or without configuration he breaks pppoe config.