119f3fa02b
Because server ops can manually decide to lock a config by prepending an @ sign in front of the config entry, there is no reason to lock this out.