using Microsoft.Extensions.Configuration;
using ZB.MOM.WW.OtOpcUa.OpcUaServer;
// The documented hardening (docs/security.md): list only the secure profiles.
var config = new ConfigurationBuilder().AddInMemoryCollection(new Dictionary<string, string?>
{
    ["OpcUa:EnabledSecurityProfiles:0"] = "Basic256Sha256Sign",
    ["OpcUa:EnabledSecurityProfiles:1"] = "Basic256Sha256SignAndEncrypt",
}).Build();
var options = new OpcUaApplicationHostOptions();
config.GetSection("OpcUa").Bind(options);
Console.WriteLine(string.Join(", ", options.ResolveEnabledSecurityProfiles()));