deny access to config.ini