web.config access allowed just for curiosities' sake, but this is clearly a "cure is far worse than the disease" type of deal.