* with configurable/publishable config * ask in InstallCommand whether the user needs this or not * allow for publishing later on * or simply instructions how to integarte cors