make config and connection private