Modular configs would help debugging, as it would allow operators to separate sensitive parts of their configuration from a main, non-sensitive configuration.

In kubernetes terms, the main config could go in a ConfigMap and then the drop-ins could be secrets.