Should the app user be able to write to config files?