use platform mechanisms for storing all configuration options, not just security-related ones