If you for example set security.authentication=mandatory in the config file, but have --noauth in your command line args, the server just silently takes the command line arg, in this case --noauth as the true value of the parameter, with no indication of the conflict. We should a warning at startup if there are conflicting values between the config file and command line arguments.