set vi mode globally
allow non-root to read auto-upgrades config