validate the flags in paxd.conf