using back-sql with cn=config