Signed config (all URLs, valid for 7 days)