ConfigACE: Building Security Configuration Constraints with Taint Propagation and Control-flow Analysis