pub(crate) fn config_security_checks(cfg_path: &Path) -> bool