issue #20154: don't crush config privs