sfa-configure only exposes vars that are in the plc_spec