config should be protected