API: Authenticated access to config settings

Including cucumber features.