Automatic validation

When reading a local config it should always be validated automatically.

For the one case where we generate a new config in memory (`import` command) just merge in the `validate-config` step logic in-line.