organize paxd.conf into more sub-sections