I'd rather inject a configuration holding the flags. why do we need to get this configuration via http?