Shiro config files for web apps are externalized