config refactor

https://github.com/edx-ops/edx-secure/pull/246

@jarv @feanil