add config.php with private, public, and read-only access modes