Some communities have pretty wide-ranging (skill-wise) player bases, and some of them want/don't want extra client-side stuff.

I get it that for PvP, a locked-down modlist is a necessity, but not everyone is playing PvP all the time.

In essence, the config would be a list of mod-ids (optionally versioned) that are allowed but not necessary to play on the server.