get-config is a security hole