From narrowest to widest: - my - channel - adapter - global Make each one of these a command to get/set mutable config from the db. None of them have access to the immutable config, as secure keys are stored there.