Improve Configuration API

[yodamad]

Describe the solution you'd like
Manage secure & unsecure configuration data differently as with current version, everything is opened "permitAll"

Describe alternatives you've considered
Secure everything and create a dedicated endpoint for specific key (such as ldap/database for login page)