make in-db authoritative, but allow config file values as well