config: provably correct handling of config.get args