Clean up config

finally answers the question, "where should that plugin list go?"

also simplifies config.js so we can keep our seekrits separate :-)