add config/unsecure.yml support