config not world readable