Hide the auto_subscribe configuration items so that they can be modified later only through the HTTP API.
auto_subscribe