config file location locked to user home dir