use config submodule for config (secure an private)