refactor: read the mfa options from config file