Clean up support for zope2_only and insecure

This is confusing enough to be served by a good test suite. Trying to figure out how to write tests to verify the configuration options are working properly e.g. zope2_only and insecure.