take verification responsibility away from the bootstrap and allow the config to verify itself