Configuration changes are pre-committed, for safety