Each client should be able to override basic application configuration like - `EnableLocalLogin` - `AccountLockoutDuration` - `RequireLocalAccountVerification` - `RequireExternalAccountVerification` - `EnableAccountDeletion` - `EnableLoginHints` and so on...