Warn about public access to users config