You are missing a subtlety by referring to "its configuration file" in the singular. Part of the problem is that there are multiple possible configuration files, at least one set of which normally does not exist and lives in the MySQL data directory which is writable by the unprivileged server user.
