PAHMA-1083: additional refactoring to improve security (location of config files)