Make secure-memory be a config option