The config is read once during the forkit startup. Add a read-only user configuration layer, and also disable config writing: no writable user config.