add config validations; can now update via API

[#80072170]