Next step: separated configuration merge from service CA