config: turn die_on_error into caller-facing enum