Make global config admin-write-only