1.make yaml config file r/w only for root
2. add some api into network rest