custom actions `config activate` and `config hooks post_install` are now done in cloaked mode