@gguli should be able to add more detail but basically killswitch should be a really basic mechanism that should depend on the least amount of code possible, therefore it should be on a completely different datapath from the configuration management, also to enable adding killswitches to the configuration code.