For the use case in the original post, it would be good to have API to distinguish error cases from PyInitConfig_Set* – at least:
- the config key does not exist (this error should be ignored if you don’t know your Python has the new security option)
- the value/type is invalid (this error should probably propagate to the user)