Working on a tweak to drop all the (non-erb generated) module config into `php.d/locked-modules.ini`. This looks like it will work and is probably the best solution here.