read MFA options from config file