multiple configs and per hat permissions