doc: document that config_diagnostics is sensible but involves risk