Consider config parsing simplification

[lukestanley]

" destinationAllowlist and pathAllowlist are used in very similar ways and unless absolutely necessary, they should probably be matching types (either arrays or objects)" - #2 (review)