Allow only absolute paths in TRUSTED_CONFIG_PREFIX_LIST, fix store leak